Mobimint Mobile App Builder for WooCommerce

Description

Mobimint Mobile App Builder for WooCommerce is a WordPress plugin that allows store owners to convert their WooCommerce website into a fully functional Android and iOS mobile app without writing any code.

The plugin syncs WooCommerce products, categories, cart, checkout, and orders with a connected mobile application. Merchants can customize the app design, manage banners, and engage customers using push notifications โ€” all from a single dashboard.

This plugin is designed exclusively for WordPress + WooCommerce based ecommerce stores.

External Services

This plugin connects to external services to enable mobile app functionality for WooCommerce stores.

1. Mobimint API (api.mobimint.co)

What the service is used for:

  • Mobile app authentication and auto-login

  • Syncing WooCommerce products, categories, cart, and orders with the mobile app

  • Sending and managing push notifications

What data is sent:

  • Store URL

  • Authentication tokens

  • User account identifiers

  • Order-related data required for app functionality

When data is sent:

  • During plugin setup and configuration

  • When users log in via the mobile app

  • When syncing store data with the mobile app

Terms of Service:

https://mobimint.co/terms

Privacy Policy:

https://mobimint.co/privacy-policy

2. Google OAuth API (oauth2.googleapis.com)

What this service is used for:

  • Verifying Google Sign-In ID tokens when users log in to the mobile app via Google social login.

What data is sent:

  • The Google ID token (a signed JWT issued by Google to the user’s device) is sent to Google’s token-info endpoint to validate its authenticity and retrieve the user’s Google account details (email, name, profile).

When data is sent:

  • Only when a user explicitly chooses to sign in with Google in the mobile app.

This service is provided by Google LLC.

Terms of Service: https://policies.google.com/terms

Privacy Policy: https://policies.google.com/privacy

Key Features

  • Build Android & iOS apps from one dashboard

  • WooCommerce product & category sync

  • Cart and checkout integration

  • User accounts & order history

  • Native push notifications

  • Multiple app themes support

  • Fully customizable UI (colors, fonts, layouts)

  • Banner & homepage section management

  • Live preview of app changes

  • Secure WooCommerce checkout

Customization

  • App design customization

  • Home screen banners

  • Login & signup screen customization

  • Product & cart page layout control

  • Pre-built app templates

  • Drag-and-drop section editor

  • Category & collection management

  • Multi-currency support (WooCommerce based)

  • Multi-language support (WordPress based)

Push Notifications

  • Abandoned cart reminders

  • Order status updates

  • Promotional notifications

  • Scheduled notifications

  • Personalized messages

  • Customer segmentation

Why Choose Mobimint Mobile App Builder?

A native mobile app helps increase customer engagement, repeat purchases, and brand loyalty. Mobimint allows WooCommerce store owners to launch their own branded mobile app quickly without any technical knowledge.

Using push notifications and a smooth mobile shopping experience, merchants can drive more conversions and retain customers effectively.

Development & Source Code

This plugin includes plain, human-readable JavaScript and PHP source code.

No obfuscated, encrypted, or intentionally unreadable code is used.

All JavaScript files (including validate.js) are included directly in the plugin

and can be reviewed, modified, and extended by developers.

No build tools (such as webpack, npm, or obfuscators) are required to review

or run the plugin source code.

Usage & Testing

  1. Go to Mobile App Builder โ€‘ Mobimint Dashboard.

  2. Sync products and categories from WooCommerce.

  3. Verify product listing and category navigation in the app.

  4. Add products to the cart and update quantities.

  5. Proceed to checkout and complete an order.

  6. Verify the order appears in WooCommerce Admin.

๐Ÿ“บ Step-by-step video guide:

2. Store Connection

  • Ensure WooCommerce is installed and activated.

  • Go to Mobile App Builder โ€‘ Mobimint Settings in WordPress admin.

  • Verify WooCommerce products and categories are detected correctly.

  • Confirm store data sync is successful.

3. Product & Cart Testing

  1. Open the Home or Categories screen in the mobile app.

  2. Select a product to open the Product Details page.

  3. Choose available product variations (size, color, etc.).

  4. Add the product to the cart.

  5. Open the Cart screen and verify:

  • Product name, price, and quantity are correct.

  • Quantity update buttons (+ / โ€“) work correctly.

  • Cart total updates dynamically.

4. Checkout Flow

  • Proceed to checkout from the cart screen.

  • Confirm redirection to the WooCommerce checkout page.

  • Verify billing details, shipping, and order total.

  • Place a test order successfully.

5. Account & Orders

  • Navigate to the Account section in the app.

  • Log in using WordPress user credentials.

  • Verify profile details and previous orders.

  • Log out and log back in to confirm session persistence.

6. Notifications

  • Allow push notifications when prompted.

  • Trigger a test order or promotional notification.

  • Verify notifications are received on the device.

7. General App Verification

  • Test navigation across all tabs (Home, Categories, Cart, Account).

  • Verify animations, loaders, and error handling.

  • Test behavior with slow or no internet connection (optional).

Screenshots

Installation

  1. Upload the plugin files to the /wp-content/plugins/mobimint-mobile-app-builder/ directory.

  2. Activate the plugin through the Plugins screen in WordPress.

  3. Go to Mobile App Builder โ€‘ Mobimint Settings in the WordPress admin panel.

  4. Configure the required app and WooCommerce settings.

  5. Save settings.

FAQ

Does this plugin support WooCommerce?

Yes. WooCommerce is required for product, cart, checkout, and order functionality.

Does this plugin support Shopify?

No. This plugin works only with WordPress and WooCommerce.

Does it support Android and iOS apps?

Yes. The plugin supports both Android and iOS mobile applications via the connected app platform.

Reviews

14 May, 2026
Mobimint makes app creation very simple with its drag & drop builder. I really liked the multi-language and multi-currency support. Creating multiple forms/pages is easy, and assigning them to menus takes just a few clicks. The best part is that everything is fully customizable and under my control. Very user-friendly plugin for anyone who wants to create a mobile app without coding knowledge. Highly recommended!
Read all 1 review

Contributors & Developers

“Mobimint Mobile App Builder for WooCommerce” is open source software. The following people have contributed to this plugin.

Contributors

Changelog

1.5.26

  • /send-notification endpoint now accepts optional from_name and from_email fields in the JSON payload; values are sanitized (sanitize_text_field / sanitize_email + is_email validation) and fall back to WooCommerce email settings when not supplied

1.5.25

  • Added consent gate to send_keys_to_external() calls in generate_api_keys_if_needed() โ€” WooCommerce API keys are only sent to api.mobimint.co after admin opts in
  • Added consent gate to mobimint_send_notification_event() โ€” push notification events (order status, abandoned cart, etc.) are only sent to api.mobimint.co after admin opts in
  • All external calls to api.mobimint.co are now blocked until the admin explicitly grants consent via the plugin settings page

1.5.24

  • Added consent form to the active root plugin file’s render_admin_page() โ€” the consent opt-in was only present in a dead includes file that WordPress never loads
  • Dashboard container now only renders after admin grants consent; without consent, only the opt-in form is shown

1.5.23

  • Switched admin dashboard fetch from REST API to wp_ajax (admin-ajax.php) โ€” eliminates rest_cookie_invalid_nonce and rest_forbidden errors caused by the REST API cookie authentication middleware on certain hosts
  • New auto_login_ajax_handler() uses check_ajax_referer() + current_user_can(‘manage_options’) for secure, standard WordPress authentication
  • Added ajaxUrl and dashboardNonce to wp_localize_script in the active root plugin file (fixes prior nonce key missing from MobimintMabVars)

1.5.22

  • Replaced X-WP-Nonce header authentication with a custom body nonce (_mobimintmab_nonce) to avoid triggering WordPress REST cookie middleware (rest_cookie_check_errors) โ€” eliminates the rest_cookie_invalid_nonce 403 on certain hosts
  • /auto-login permission_callback now verifies wp_verify_nonce() on the body nonce plus current_user_can(‘manage_options’); no X-WP-Nonce header is sent from validate.js

1.5.21

  • Moved /auto-login and /update-store-details REST endpoints out of public routes โ€” now require current_user_can(‘manage_options’)

  • Added consent check inside auto_login_proxy() โ€” no store data is sent to api.mobimint.co until admin opts in

  • Removed checkout_nonce WebView login block โ€” WordPress nonces are CSRF tokens, not authentication credentials; cart_token (cryptographic, one-time-use) is the only WebView login mechanism

  • Added X-WP-Nonce header to admin dashboard fetch call (validate.js) for proper REST API authentication

1.5.20

  • Consent form now blocks the React dashboard from loading until admin explicitly opts in โ€” dashboard only renders after consent is saved

  • Improved consent UI: full-page card with bullet list of data sent, Privacy Policy and Terms links, and a clear checkbox before the Enable button

1.5.19

  • Fixed missing phpcs:ignore on checkout_nonce login block do_action(‘wp_login’) in both plugin files

1.5.18

  • Added phpcs:ignore for do_action(‘user_register’) โ€” user_register is a WordPress core hook, not a plugin-defined hook name

1.5.17

  • Added phpcs:ignore for do_action(‘wp_login’) calls โ€” wp_login is a WordPress core hook, not a plugin-defined hook name

1.5.16

  • Added explicit data-sync consent checkbox on the admin page โ€” data is only sent to api.mobimint.co after admin opt-in

  • All sync hooks (product, category, order, migration) are gated behind the stored consent option

  • Added do_action(‘user_register’) after wp_create_user in social login flow so security plugins are notified

  • Added do_action(‘wp_login’) after wp_set_auth_cookie in all mobile webview login flows so security plugins can intercept

1.5.15

  • Fixed phpcs NonceVerification warnings on $_GET reads inside cart_token and checkout_nonce auth blocks

  • Normalized line endings in mobile-thankyou.php (mixed CRLF/LF LF)

1.5.14

  • Removed all error_log() debug calls from API class (Plugin Check compliance)

  • Fixed text domain: replaced hardcoded ‘woocommerce’ with ‘mobimint-mobile-app-builder’ in translation calls

  • Renamed template variables to use mobimintmab_ prefix to avoid global namespace conflicts

  • Replaced wp_redirect() with wp_safe_redirect() in mobile-order-pay template

  • Added phpcs:ignore annotations for WPML hooks, mobile REST context nonce exemptions, and schema-change queries

1.5.13

  • Restricted social login to Google only (server-side token verification via oauth2.googleapis.com)

  • Removed CSRF-vulnerable user meta writes from woocommerce_load_cart_from_session and standalone init hooks

  • Currency preference now only saved to user meta inside the authenticated cart_token validation block

1.5.12

  • Removed uninstall ping to external server (phoning home on plugin deletion)

  • Added proper permission_callback to all REST API routes (public vs authenticated)

  • Cart token is now consumed on first use to prevent replay attacks

  • Removed CSRF-vulnerable user meta update from unauthenticated GET currency hook

  • Added comments to clarify third-party plugin global variable references

1.5.11

  • Automatically register WooCommerce tax names and shipping method titles with Polylang

  • Tax and shipping labels now appear in Polylang String Translations screen for translation

1.5.10

  • Fixed cart API tax and shipping labels not translating for multilingual stores (Polylang)

  • Added pll__() lookup for tax labels and shipping method labels

1.5.9

  • Fixed cart API returning shipping and tax labels in wrong language for multilingual stores

  • Added language switching support via ?lang= query parameter (Polylang and WPML compatible)

1.5.8

  • Removed WP_DEBUG / WP_DEBUG_LOG constants from plugin code (must be set in wp-config.php only)

  • Moved admin menu position from 6 to 80 to respect WordPress core menu hierarchy

  • Replaced all inline and tags in templates with wp_add_inline_style() and wp_add_inline_script()

  • Removed debug-only logging hooks that passed unsanitized $_GET/$_POST values to error_log

  • Removed automatic deactivation/uninstall ping to external server (phoning home)

  • Renamed JavaScript variable McoVars to MobimintmabCheckoutVars for unique prefixing

  • Added Google OAuth (oauth2.googleapis.com) documentation to readme External Services section

  • Bumped plugin version to 1.5.8

1.5.7

  • Checkout webview improvements

1.5.6

  • Social Login Implementation fixing

1.5.5

  • Fixed Polylang Multilanauge pro issues

  • Social Login Implementation

1.5.4

  • Polylang Multilanauge implemented

  • Social Login Implementation

1.5.3

  • Removed obfuscated JavaScript

  • Included fully human-readable source code

  • Code compliance improvements for WordPress.org guidelines

1.5.2

  • Minor bug fixes

  • Stability improvements

  • Compatibility improvements

1.5.1

  • Removed obfuscated JavaScript

  • Included fully human-readable source code

  • Code compliance improvements for WordPress.org guidelines

1.5.0

  • UI improvements

  • Performance optimizations

  • Bug fixes

1.0.0

  • Initial release with WooCommerce mobile app integration