Webhooks blocked by CB Paid Subscriptions

We have installed a new payment gateway for VirtueMart (Stripe Checkout for VirtueMart, by Norrnext): norrnext.com/ecommerce/virtuemart/stripe-checkout-for-virtuemart

The webhooks gets code 301 in Stripe control panel. I opened a case at Norrnext forum and got the answer that the plugin cbpaidsubscriptions denies access to URL (see answer below). 

We have old Stripe payment gateways still in CB Paid Subscriptions (disabled). Can these block the function of webhooks in VirtueMart? We've tried to delete the Stripe payment gateways in CB Paid Subscriptions, but it not possible due to "Payments exist for this gateway account". We don't want to delete the payments history. Is there a way to move/change payment history and then delete the Stripe payment gateway in CB Paid Subscriptions?


//Ronny

---

Norrnext forum answer:

This URL is an entry point in VirtueMart for payment notifications.

ducatiklubben.se/index.php?option=com_virtuemart&view=pluginresponse&task=pluginnotification&tmpl=component

When we try to reach it we have a 301 and 303 response:

curl -I -L " ducatiklubben.se/index.php?option=com_virtuemart&view=pluginresponse&task=pluginnotification&tmpl=component "

HTTP/1.1 301 Moved Permanently
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
Date: Mon, 15 Sep 2025 05:46:11 GMT
Server: LiteSpeed
Location: www.ducatiklubben.se/index.php?option=com_virtuemart&view=pluginresponse&task=pluginnotification&tmpl=component

HTTP/1.1 303 See Other
Connection: Keep-Alive
Keep-Alive: timeout=5, max=100
X-Powered-By: PHP/8.3.25
set-cookie: 1181853b9c1a01bf467af0b14348d460=o2k7nq56hegcuamiip11ofcfoh; path=/; secure; HttpOnly
x-frame-options: SAMEORIGIN
referrer-policy: same-origin
cross-origin-opener-policy: same-origin
Location: www.ducatiklubben.se/cb-profile/pluginclass/cbpaidsubscriptions?do=accessdenied&accesstype=components&accessvalue=com_virtuemart&accessurl=b3B0aW9uPWNvbV92aXJ0dWVtYXJ0JnZpZXc9cGx1Z2lucmVzcG9uc2UmdGFzaz1wbHVnaW5ub3RpZmljYXRpb24mdG1wbD1jb21wb25lbnQ=

It seems that the plugin cbpaidsubscriptions denies access to URL.

If you're protecting the URL with By URL Part protection, then menu item with By Menu protection, or the extension with By Extension protection using CBSubs Content integration then it's working as expected. Adjust your protections so it won't do so. From the looks of the URL you're protecting the entire VirtueMart extension with CBSubs so that's doing as it should and preventing access to the VirtueMart extension.