EN
EUR
Back

VibeFox CorvusPay for WooCommerce — Help

Requirements

WordPress: 6.0 or later.

WooCommerce: 7.0 or later, installed and active. The plugin refuses to activate without it.

PHP: 8.0 or later.

Currency: AUD, BAM, BHD, CAD, CHF, CZK, DKK, EUR, GBP, HRK, HUF, ISK, MKD, NOK, PLN, RON, RSD, RUB, SEK or USD. In any other currency the payment method is hidden at checkout. Amounts are sent with 2 decimals; a total with more decimals (for example in a 3-decimal BHD shop) is refused instead of being rounded.

CorvusPay account: you need a CorvusPay merchant account. CorvusPay issues a Store ID and a Secret Key for each store, separately for the test and the production store; they are shown in the CorvusPay Merchant Center. The Success URL and Cancel URL of the plugin must be entered there (see Configuration).

VibeFox license key: bought on vibefox.net. One key works on one domain.

Installation

1. In WordPress go to Plugins > Add New > Upload Plugin, choose the plugin ZIP file and click Install Now. You can also upload the wcp_corvuspay_gateway folder to /wp-content/plugins/ by FTP.

2. Click Activate.

3. Open the settings: WooCommerce > Settings > Payments > CorvusPay > Manage, or click Settings under the plugin name on the Plugins page.

4. Enter your VibeFox license key in the license block at the top of the page and click Activate.

5. Enter the Store ID and Secret Key of your CorvusPay test store (and of the production store for live payments). Copy the Success URL and Cancel URL shown on the settings page into the CorvusPay Merchant Center, for the test and the production store.

6. Turn on Enable/Disable, place a test order, then untick Test Mode to go live.

Configuration

All settings are on one page: WooCommerce > Settings > Payments > CorvusPay. Above the fields the page shows Test mode is on. while test mode is on, warns you when the gateway is enabled but the Store ID or Secret Key of the current mode is empty (it is then hidden at checkout until they are filled in) and when the store currency is not supported by CorvusPay.

General

Enable/Disable: Enable CorvusPay Gateway turns the payment method on or off. Default: off.

Title: the payment method name customers see at checkout. Default: Credit/Debit Card (CorvusPay).

Description: the text shown under the payment method at checkout. Default: Pay securely with your credit or debit card via CorvusPay. In test mode (Test mode — no real payment is taken.) is added to it.

Store credentials

The Store ID and Secret Key are issued by CorvusPay for each store (test and production separately) and are shown in the CorvusPay Merchant Center.

Test Mode: Enable test mode uses the CorvusPay test environment (wallet.test.corvuspay.com) and the test Store ID and Secret Key. Default: on.

Test Store ID: the numeric Store ID of your CorvusPay test store.

Test Secret Key: the Secret Key of your CorvusPay test store, used for the HMAC-SHA256 signatures.

Live Store ID: the numeric Store ID of your CorvusPay production store.

Live Secret Key: the Secret Key of your CorvusPay production store, used for the HMAC-SHA256 signatures.

A Store ID must contain digits only. If you enter anything else, an error is shown and the previous value is kept. A payment is always verified with the Secret Key of the store it was made in, so keep the test key filled in while test orders are still open.

Success and Cancel URLs

Copy the two addresses shown in this section into the CorvusPay Merchant Center, for the test and the production store. CorvusPay returns the customer to them after the payment.

Success URL: looks like https://your-site/wc-api/corvuspay_payment_success/. CorvusPay signs this request; the order is marked paid only after the signature is verified.
Cancel URL: looks like https://your-site/wc-api/corvuspay_payment_cancel/. CorvusPay does not sign it, so it can only cancel an unpaid order with a CorvusPay order number issued by this store.

Payment

Transaction Type: how the card is charged.

Sale (capture immediately): the card is charged at once (default).
Authorize only (capture in Merchant Center): the amount is only reserved. The order is put on hold; you capture (complete) the payment in the CorvusPay Merchant Center, then set the order to Processing.

Payment Page Language: the language of the CorvusPay payment page. Site language (default) uses the current language of your site when CorvusPay supports it, otherwise English. You can also choose Croatian, English, German, Italian, Serbian or Slovenian.

Order Status After Payment: the status of the order after a successful Sale payment. The status is set at once, without a second status change.

Processing (WooCommerce default): default.
Completed: every paid order becomes Completed.
On Hold: every paid order waits for your manual review.

Advanced

Logging: Enable debug logging writes to WooCommerce > Status > Logs, source wcp_corvuspay_gateway. Errors are always logged; secrets and customer data never are. Default: off.

Delete Data: Delete the plugin settings and log files when the plugin is deleted (uninstalled). Deactivation never deletes anything. Payment data stored on orders is always kept. Default: off.

Checkout

The customer chooses the payment method (by default Credit/Debit Card (CorvusPay)) and places the order. The order stays Pending payment, and the Pay for order page shows Redirecting to CorvusPay for payment. Please wait... and sends the signed form to the CorvusPay payment page. If the redirect does not start, the customer clicks Pay via CorvusPay. The order total, currency, a short cart description and the billing details (to pre-fill the payment page) are sent. The same CorvusPay order number is reused while the amount does not change, and CorvusPay does not accept a second payment for it.

After paying, CorvusPay returns the customer to the Success URL. The order is marked paid only after CorvusPay confirms it: the CorvusPay order number must have been issued for this order, the signature must match the Secret Key of the store the payment was made in, and the amount and currency must match the order. Then the customer lands on the order received page. Stock is reduced when the payment is confirmed, and the cart is emptied on the order received page.

If the customer cancels on the CorvusPay page, the unpaid order is cancelled and the customer returns to the checkout with the cart intact and The CorvusPay payment was cancelled and the order was not paid. Your cart is still here — you can try again or choose another payment method. If the payment was started from the Pay for order page and the cart is empty, WooCommerce shows The CorvusPay payment was cancelled and the order was not paid. on the cart page. If the Success URL request cannot be verified, the customer sees We could not confirm this CorvusPay payment. If your card was charged, please contact the shop — do not pay again. and the order is not changed.

The payment method works on the classic checkout, on the Checkout block and on the Pay for order page. It is compatible with WooCommerce High-Performance Order Storage (HPOS). The texts are translated into Croatian.

The order is confirmed only when CorvusPay returns the customer to the Success URL; there are no server-to-server notifications. If the customer closes the browser right after paying, the order stays Pending payment. The plugin has no refunds, captures or voids from WooCommerce (the CorvusPay server API requires a client certificate), no saved cards, subscriptions, installments, IBAN / PIS or CorvusWallet options.

Orders

Order statuses

Pending payment: the customer was sent to CorvusPay and has not returned yet. If the customer paid but did not return, check the payment in the CorvusPay Merchant Center and complete the order manually.

Processing, Completed or On Hold: the Sale payment was confirmed. The status follows Order Status After Payment. The order note shows the CorvusPay order number, the approval code and the card type. The transaction ID of the order is the CorvusPay transaction ID or, if CorvusPay does not send one, the CorvusPay order number, by which the payment can be found in the Merchant Center.

On hold, authorized: Authorize only is selected. Capture the payment in the CorvusPay Merchant Center, then set the order to Processing.

On hold, amount/currency mismatch: the paid amount or currency does not match the order. Do not ship before verifying the payment in the CorvusPay Merchant Center.

On hold, payment for a cancelled order: a successful payment arrived after the order had been cancelled, for example by the unpaid-order timeout. Fulfil the order or refund the payment in the CorvusPay Merchant Center.

Cancelled: the customer cancelled the payment on the CorvusPay page.

If another, different successful payment arrives for an order that is already paid or closed, the order is not changed. A note asks you to check the CorvusPay Merchant Center and refund the duplicate payment if needed.

Refunds: refunds, captures and voids from WooCommerce are not supported. Do them in the CorvusPay Merchant Center and record the refund in WooCommerce manually.

License key

The plugin works with a VibeFox license key from vibefox.net. The license block is at the top of WooCommerce > Settings > Payments > CorvusPay. Paste the key into License key and click Activate. The block shows the status, for example the date the license is active until and your domain. Use Check now to check the status again, Change key to enter another key and Remove key to remove it from this site. The link Manage licenses and domains in your account opens your vibefox.net account.

One key works on one domain. Removing the key from a site does not free its domain slot. Free the slot in your vibefox.net account.

Without an active key, CorvusPay is not shown to customers at checkout. If a payment is started anyway, the customer sees This payment method is not available. Please choose another one. Logged-in store managers still see the payment method, marked (unlicensed — visible to admins only), so you can set up and test the plugin before you buy a key. A reminder appears on the Plugins page and on WooCommerce pages. Existing orders are not affected: customers returning from payments already started are still processed.

When a license expires, the plugin keeps working, but updates and support need a renewal. The status is checked again automatically in the background.

Troubleshooting

CorvusPay does not appear at checkout: check that the license is active, Enable/Disable is on, the Store ID and Secret Key of the current mode are filled in (Test Store ID and Test Secret Key in test mode, Live Store ID and Live Secret Key in live mode) and the store currency is supported by CorvusPay. The settings page shows a warning in each case.

The payment went through, but the order stays Pending payment: the Success URL is probably not entered in the CorvusPay Merchant Center, or the Secret Key in WooCommerce does not match the store. Turn on Logging and look for INVALID signature in WooCommerce > Status > Logs, source wcp_corvuspay_gateway. The order also stays pending if the customer closed the browser before returning; then check the payment in the Merchant Center and complete the order manually.

The customer sees We could not confirm this CorvusPay payment: the Success URL request was rejected: required fields were missing, the CorvusPay order number was not issued for the order, the Secret Key of that store is empty or the signature did not match. The order is not changed. The log shows the reason.

The customer sees This order total cannot be paid via CorvusPay: the total is zero or has more than 2 decimals.

The customer sees CorvusPay is not configured or CorvusPay does not accept payments in …: the Store ID or Secret Key of the current mode is missing, or the order currency is not supported.

Order is On hold: read the order note. Authorize only is selected, the paid amount or currency did not match the order, or the payment arrived after the order had been cancelled.

The license block shows an error: follow the message in the block. For example, if the key is already used on another domain, free a slot in your vibefox.net account and click Check now. If the site address changed, click Check now to activate the key for the new domain. If the license server cannot be reached, the plugin keeps working on the last known status.

Uninstall

Deactivating the plugin keeps all data. To remove it, deactivate and delete it on the Plugins page. The license key and license status of this plugin are always removed. The gateway settings and the log files are removed only if Delete Data was on. Otherwise they stay for a later re-install. Payment data stored on orders is always kept. Existing orders keep their payment notes and transaction IDs.

CorvusPay is a trademark of its respective owner. This plugin is not affiliated with or endorsed by CorvusPay.