You can now see which extensions are installed, which are disabled, which hooks they own and which scheduled tasks they run. Plus a twice-yearly routine worth adopting.
Hooks are why you can customise CubeCart and still upgrade. The hook editor, extension ownership in the registry, and a Smarty security policy that changed four times.
CubeCart’s REST API covers nine resources with Bearer token authentication and per-key rate limiting. What you can build with it, how authentication works, and the one version you must not run it on.
If a CubeCart feature seems to fire erratically or not at all, this is almost certainly why. Setting up a real cron entry is the single most useful thing most stores are missing.
Categories and products can now be restricted to specific customer groups, with bulk group pricing tools. Trade and retail from one store, without a plugin.
Nearly every CubeCart vulnerability fixed this year requires an existing admin session. Two-factor authentication is the control that breaks that chain, and it takes five minutes per account.
Stop pasting tracking snippets into skin templates where upgrades destroy them. One container, managed from a web interface, with purchase tracking and Consent Mode v2 built in.
CubeCart now includes a genuine 3D bin packer that works out which boxes an order actually needs, rather than quoting shipping on total weight alone.
Tax rounding, coupon tax and gift certificate handling were rewritten across four releases. Some of your figures have legitimately changed, and you need to know which.
Flat rates subsidise heavy orders and overcharge light ones. All In One Shipping calculates from weight, subtotal and item count, with postcode zones capable enough to handle the Scottish Highlands properly.