DOWO

WooCommerce Emails

Last updated 1 month ago

A WordPress/WooCommerce plugin that lets registered customers send copies of order-related emails to one or more secondary addresses, such as finance@company.com and ops@company.com.

Security model

The plugin uses an explicit allowlist. It copies only these WooCommerce customer email types:

  • Processing order
  • Order on hold
  • Completed order
  • Refunded order
  • Invoice/order details/payment request
  • Customer note
  • Failed order
  • Cancelled order

It does not copy:

  • Password resets
  • New account or credential emails
  • Any WordPress account/authentication email
  • WooCommerce administrator notifications
  • Third-party or newly introduced WooCommerce emails unless explicitly added

Only registered-customer orders are eligible. Guest orders are ignored because there is no authenticated user preference to resolve.

Customer usage

  1. Open My account > Account details.
  2. Add one or more secondary email addresses in the tagged email field.
  3. Save changes.

Removing all addresses disables copying automatically.

Administrators can manage the same preference on the customer's WordPress user profile.

Installation

  1. Copy this directory to wp-content/plugins/dowo-wce.
  2. Activate WooCommerce.
  3. Activate Dowo WooCommerce Email Copies.

Requirements:

  • WordPress 6.5 or newer
  • WooCommerce 8.0 or newer
  • PHP 7.4 or newer

Extending the allowlist

Third-party order emails can be added deliberately:

add_filter(
	'dowo_woocommerce_email_copies_allowed_email_ids',
	static function ( $email_ids ) {
		$email_ids[] = 'vendor_customer_order_dispatch';
		return $email_ids;
	}
);

Review the full content and recipient context of any email before allowing it. Never add password reset, magic-link, account verification, or credential emails.

Privacy

The secondary addresses and copy enable state are stored in user meta. The plugin integrates with WordPress personal data export/erase tools and supplies suggested privacy policy text. Uninstalling the plugin removes its user metadata.