Breaks down the September 2026 MCLOUD-15053 patch: fixes rollback ACL, export path traversal, GraphQL customer scope, Instant Purchase address ownership, PayPal Express quote binding, admin VAT XSS, URL escaping, plus B2B UI ACL and validator changes. Covers version-specific differences (2.4.4–2.4.9; B2B 1.3.3–1.5.3) and notes you also need APSB26-146.
Provides per-package patch sets for the July 2026 security release, compatible with cweagans/composer-patches, covering 2.4.6-p15, 2.4.7-p10, 2.4.8-p5, and 2.4.9 (including B2B). Includes composer.json snippets, application steps, and notes on nginx.conf.sample and the omitted patch-status script.
Composer meta-package that installs 12 Orangecat B2B modules (company accounts and approval, company credit, payment/shipping restrictions, sales reps, custom pricing/price lists, product lists, purchase orders, quick order, RMAs, visibility rules). Includes setup commands, requirements, and dependency order.
QuickOrder is a free module that enables customers to add multiple products to their cart using SKU or product names in a single form. It features a fast and simple UI, is compatible with Hyvä Theme, and is particularly useful for B2B and wholesale stores. Installation is done via Composer, and the module is open-source under the MIT license.