That's what one of our clients, Jessica, told us. She was running a small mug store on WooCommerce—sales were okay, but stuck.
Until she discovered personalization.
Until she discovered Cmsmart.
Fast-forward 30 days:
- ✅ Her store was redesigned with AI product options
- ✅ Customers could design their own mugs with 3D preview
- ✅ AOV jumped by 42% — and she finally felt in control
Want to learn how she did it (and how you can too)?
🎓 Join our FREE 30-Day Email Course:
"Personalize, Launch & Scale – The Smart Ecommerce Way"
You'll get:
- ✔ 1 lesson a day, straight to your inbox
- ✔ Real store examples, demos & playbooks
- ✔ No tech jargon. Just strategy that works.
Hi everyone,
I'm David – CEO of Cmsmart Ecommerce, Netbase JSC. Since our last release note we have shipped a long run of updates to the WooCommerce product designer — from 2.13.0 all the way to 2.15.0 — and this post pulls the whole run together for you. Two things matter most: a security fix every store should install, and a new way to decide who uses the AI tools in your online product designer and turn that into leads.
TL;DR
Who is this update for?
If you run a web-to-print or personalised-product store on WooCommerce with the Cmsmart Online Product Designer plugin, this is for you — whether you already offer the AI tools or have not switched them on yet. Existing customers: your questions are answered first, before the feature tour.
Is it safe to install over my current version?
Yes. This is a normal in-place update. Your licence key, your product settings and your saved designs all carry over — no reconfiguration, no data migration you have to run. If you already had the AI tools switched on, they stay exactly as you left them; if a product used a clipart category whitelist, please read the clipart note near the end.
Do I need to update right now?
Yes — this one is a security release. 2.15.0 closes an unauthenticated arbitrary file upload in two image-import routes: they decided a saved file's extension from something the caller supplied (a URL ending in
.php, or a Google Drive file name), so a crafted request could write an executable file into the uploads folder. The server now decides the extension from the file's actual content and rejects anything that is not a real image, and remote image fetches are restricted to public web addresses. This was reported responsibly by Mike Gozdiskowski (WPScan / Automattic) — thank you.The two releases before it hardened the same area: 2.14.1 rewrote every database query in the personal-design handlers to use safe, parameterised statements and stopped one customer from reading or altering another customer's saved design, and 2.13.0 kept nonce checks enforced on design saves and stopped exposing an image-generation API key to browsers. If you are on any build older than 2.15.0, updating is the right move.
Will my Orders and Clients screens stop timing out?
Yes, since 2.13.2–2.13.3. On stores with a real order history, the Cmsmart Orders, Quote Requests, Overview and Clients screens used to load every order into memory to build their numbers, and on a large catalogue that simply ran out of time and showed a critical error. They now count with database aggregates and scan in bounded batches, so the pages open regardless of how many orders you have — the figures are identical, they just no longer try to hold the whole store in memory at once.
Alongside that, several designer and file problems are gone: the Modern designer no longer hangs on a blank loading screen (2.14.0), changing an Icons category no longer leaves it loading forever (2.13.1), the WooCommerce 11 Cart and Checkout blocks show the design and upload controls again (2.13.0), and "View file" and "Download print PDF" work on a brand-new order without any extra step (2.13.4).
Does the designer finally fit on a phone?
Yes, since 2.14.1. The design stage used to keep whatever size it was given when the page first loaded, so narrowing the browser — or opening the designer on a phone after the layout settled — left the artwork wider than the screen and overflowing. It now recalculates as the window changes: at a 425px viewport the stage went from 696px (overflowing) to 325px (fitting), with the design and any zoom level preserved, and typing on a mobile keyboard no longer makes it jump.
The bigger change: you decide who uses AI — and turn it into leads
Everything about the AI tools now lives on one screen. The old three separate pages are merged into a single Cmsmart Cloud page with four tabs — Overview, AI Tools, Storage and Billing. Overview never opens with a raw number to interpret; it opens with a sentence about whether AI is running, plus a health check on the tools and, when relevant, who is waiting.
Who may use the AI tools?
On the AI Tools tab, a master switch turns buyer-facing AI on or off, each tool (Background Remover, Image Upscale, Preflight) has its own toggle, and one setting decides the audience: Everyone, Members, or Customers who have ordered. This is a real business decision, so it is worth reading twice.
What does a customer see when they cannot use AI?
Instead of hiding a tool a visitor is not allowed to use, the designer shows the button with a small padlock and, on click, a short dialog that explains what is missing — and reassures them their work is safe. The call to action opens in a new tab, so an in-progress design is never lost.
What happens when the token balance runs out?
Nobody is left stranded. If your balance hits the floor you set — or a real "out of tokens" response comes back — the store enters a paused state, and the two sides get two different messages. Your customer never sees anything about money; they see the assistant is resting and can ask you to switch it back on.
You, meanwhile, get one email when it starts and at most one digest a day after that — never one email per failed request. Every person who asked lands in a Customers waiting queue with what they wanted and on which product, and the moment you top up they are all emailed automatically. And topping up no longer sends you off to another site: the Buy tokens button opens the purchase in a dialog over the page you were on, and the action you were mid-way through replays itself once you pay.
Where do the leads and unfinished work show up?
They show up on the screens you already use — no new place to learn. A member who signed up to use an AI tool appears in Clients on a new AI channel; a design they started but did not order appears in Files as a Pending design (kept separate from anonymous "orphan" files); and a design left in the cart is counted under Carts pending in Orders.
Keeping your storage tidy
Because unfinished designs are now kept as leads, there is a setting to keep disk use under control. Under Settings → General → Files retention you can delete files that belong to no order and no customer after a chosen number of days, and get a gentle size warning for genuine customer designs — which are never deleted automatically, because they are sales opportunities, not clutter.
Your own clipart categories, only if you want them
Some stores want to offer only their own cliparts. There is now a site-wide Enable global clipart library switch (on by default, so nothing changes unless you turn it off) and a per-product Include Cmsmart global clipart library option. If a product already limits its cliparts to selected categories, that limit now covers the global library too — which is what "only these categories" was always meant to do.
Frequently asked questions
Do I have to update, or can I wait?
Please update. 2.15.0 is a security release. The flaw was reported to us privately by a security researcher rather than found in an attack, and we have no report of a store being hit — which is exactly the moment to patch. It changes no settings and nothing about normal use, so there is no reason to wait.
Will updating change how my store behaves for customers?
No. Existing stores keep their current behaviour. The new audience setting defaults to leaving AI open exactly as it was; you switch to members-only when you choose to.
Do my customers pay for the AI tools?
No — you do. AI is a perk you offer; customers never see a token or a price. You control the cost with the audience setting and a per-customer daily limit.
Is Cmsmart Cloud a new account I need to set up?
No. It is the same page you already had, reorganised into four tabs, working on your existing Cmsmart licence. Your old links still work and land on the matching tab.
What happened to the old AI Tools / Token Wallet / Cloud Storage pages?
They became the tabs of the single Cmsmart Cloud page. Bookmarks to the old addresses redirect to the right tab.
Everything in this release run (2.13.0 → 2.15.0)
New
Improvements
Fixes
Security
How to get it
Update from your WordPress plugins screen, or download the latest build from your Cmsmart Online Product Designer account. New to the plugin? The user guides walk you through setup. For the story so far, our previous note covers licensing, the quotes area and print-ready files, and the release before it introduced the built-in customer CRM and print quality checks.
As always, if anything looks off after updating, open a ticket and my team will take a look — [email protected].
— David, CEO of Cmsmart Ecommerce
Have you switched your AI tools to members-only yet? Tell us how it is working for your store in the Cmsmart community.
David Nguyen
Founder & CEO, Cmsmart Ecommerce (a division of Netbase JSC)
With over 20 years of experience in business strategy and ecommerce technology, David Nguyen has empowered hundreds of online retailers around the world to scale smarter and faster. As the visionary behind Cmsmart, he has driven the development of personalization solutions and product-customization tools that deepen customer engagement and boost average order values. His commitment to creativity, practical strategy and results-driven outcomes has earned Cmsmart a reputation as a trusted partner for small, medium and enterprise-level ecommerce brands.
Contact Me via WhatsApp: https://wa.me/84937869689
Email: [email protected]
Let’s talk about how your ecommerce store can grow.
If you're ready to transform your store with tailored solutions that drive engagement and revenue, send me a message on WhatsApp or email today — and our team will connect with you right away.
Direct contact & support
Need help fast? Message me anytime: