Plugin Pulse Beta
← Pulse

Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification

by YoOhw Studio · eCommerce

Also makes 14 other plugins · 3K+ installs across the portfolio →

Block risky WooCommerce orders, spam signups, and form submissions with blacklist rules plus built-in checkout email verification.

Try it live opens a temporary test site in your browser, which can take about 20 seconds to load. Plugins that rely on outside services or a full server may not work completely there.

Health

B 81/100

no flags

Active installs

2K+

≈2.9K estimated

Momentum

+35%

downloads vs prior 30d

Biggest opportunity: Swap “checkout” and “form spam” for “risky” and “fraud”. “checkout” isn't earning its slot: you're not in the first 24 results for its own search. “risky” sits at #5 untagged, close enough for a declared tag to move it up. “form spam” isn't earning its slot: you're not in the first 24 results for its own search. “fraud” sits at #6 untagged, close enough for a declared tag to move it up. All five slots are taken, so one has to go.

How scoring works →
81 Health · B
Maintenance 100/100
Rating quality 68/100
Support 70/100
Security 81/100

81 health vs 71 average across 9,750 eCommerce plugins

Install conversion

How it's measured →

2.4%

of downloads still active

At least 2K of 83.3K lifetime downloads are still running, above its category: the median eCommerce plugin keeps 1.4%, across 5,143 plugins.

Downloads count every update, not just first installs, so older and more frequently released plugins read lower. Compare against other eCommerce plugins, not across the directory. wp.org reports active installs as the bottom of a band, so the real rate is this or higher.

This plugin shipped 27 releases in the last 12 months, and every existing install that updated counted as another download. wp.org publishes no split between first installs and updates, so we show the raw rate rather than guess at one.

Details

Version
2.4.0
Last updated
9d ago
Added
2024-01-18 · 2 yrs old
Requires WP
6.3
Tested up to
7.1.4
Requires PHP
7.4

Directory ranking optimization

How it's scored →

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

88 / 100

Excellent listing optimization

Most to gain: Rating quality

Update recency 100/100

Updated 9 days ago

WP compatibility 100/100

Tested up to WordPress 7.1.4, the current branch or newer

Rating quality 66/100

3.6★ over 14 reviews, smoothed to 3.99★ and held back under 25 reviews

Listing tuning 100/100

5 of 5 tags set · short description in place

Support resolution 67/100

2 of 3 support threads resolved in the last 2 months

To rank higher: Too few reviews to rank on quality — nudge happy users to leave one.

Get the full rank-higher report →

Daily downloads

Since 19 Jan 2024 · 1,017 days · wp.org + Plugin Pulse archive

+35% vs prior 30d
8131 Oct 2026

30-day downloads

Rolling 30-day volume · peak 6.9K · peaks are release surges

6K31 Oct 2026

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Blacklist Manager · #4476youFraud Prevention For · #3253Comment Blacklist Up · #7529Checkout Guard · #17178

Rating trend

Star average over time · dips mark rough releases

3.631 Oct 2026

Health trend

Composite health score, snapshotted daily

8131 Oct 2026

Update activity

How busy the existing users are, measured as downloads in the last 30 days for every 1,000 active sites. A spike means a new release everyone's pulling; a long, slow decline means an aging user base that updates less.

3K31 Oct 2026

Release cadence

Actively maintained
from wp.org release tags

How often this plugin actually ships. A steady rhythm is the maintenance signal a single "last updated" date can't show.

27

releases in the last 12 months

9d ago

latest release · v2.4.0 · 22 Oct 2026

41

tagged releases on record

Recent releases

2.4.0 · 22 Oct 20262.3.4 · 15 Oct 20262.3.3 · 8 Oct 20262.3.2 · 23 Sep 20262.3.1 · 4 Sep 20262.3.0 · 2 Sep 20262.2.11 · 2 Aug 20262.2.10 · 26 Jul 20262.2.9 · 15 Jul 20262.2.8 · 12 Jul 20262.2.7 · 14 Jun 20262.2.6 · 22 May 20262.2.5 · 4 May 20262.2.4 · 27 Apr 2026

What its installed base runs

via wordpress.org

Share of active installs on each version of this plugin. Green is the current release; a big slice on older versions is a user base that has stopped updating.

v2.2 78%
v2.1 16%
Older / other versions 6.5%

Estimated active installs

The public count shows “2K+”. Our estimate pins where the real number sits.

tracked estimate
2K–3K ≈2.9K

Crossed into this band 14 months ago; a band this size takes about a year or more to cross, which places it about 90% of the way through.

Install history since 18 Jan 2024

2K31 Oct 2026

Recent reviews

All reviews on wp.org ↗
  1. ★★★★★ trotsky
    7mo ago

    Almost everything mentioned in the description is not available in the free version. You could call that a “bait and switch”. At the very least, it is dishonest.

    Read on wp.org ↗
  2. ★★★★★ Maxcom
    8mo ago

    The free version of this plugin is hilariously useless. As you go through the settings panel every setting in 7 of the 8 settings panels requires to be unlocked via the pro plugin version. There are only 2 settings in the general panel that can be used. One is Cancel the order / Prevent customers from checking out if they use the phone number or email address is on the blocklist. But you cant actually use the phone number or email blocking unless you upgrade! The only actual setting that works is via subscribing to their global blacklist. Such blacklists are useless (I explain why below). Going through the grayed out settings almost all are useless in any case. Bot farms attempting to test stolen credit card numbers use public domain email variations such as johndoe24f5@gmail/hotmail/yahoo and if you block a top level free mail provider your at risk of losing most of your potential customers. And bot farms have access to hundreds of thousands of ips worldwide so they will rotate the ips for every order attempt – we just dealt with one CC swarm which used over 75k American ips. Simple IP blocking is 5th grade amateur level defense that is easily defeated by an attack. The only settings in this plugin that would be useful are matching IP address to the order address, preventing multiple orders with the same email/phone and requiring a confirmation email or text. And none of those features are available in the free version of the plugin. Garbage in, garbage out.

    Read on wp.org ↗
  3. ★★★★★ tangentwpservices
    1.1y ago

    WooCommerce site was being flooded with Failed orders and CC fraud. Installed the plugin, configuration was fairly easy. And it stopped the CC failed orders. Will keep an eye on the situation, but for now, it works as advertised. Tech support and customer service is very good.

    Read on wp.org ↗
  4. ★★★★★ tuchubby
    1.3y ago

    All of my forms and woocommerce checkout is getting a critical error when a user submits. The risk for lost customer trust is not worth installing.

    Read on wp.org ↗
  5. ★★★★★ rick59
    1.4y ago

    Installed this plug-in to block the IP addresses of some malicious ‘customers’ who would order and deny receiving the goods to seek refunds. Even though we had proof of delivery. No more bad orders since using the plug-in

    Read on wp.org ↗
  6. ★★★★★ diegosn79
    1.6y ago

    The free version works very well for basic blocking of fraudulent users. It’s very useful. Great job! Thank you very much.

    Read on wp.org ↗
  7. ★★★★★ daniel1009
    1.7y ago

    My client had over 1000 spam orders and I installed this plugin and it took care of the issue immediately. Very easy to use. I highly recommend.

    Read on wp.org ↗
  8. ★★★★★ dw.inglis
    1.9y ago

    We started using this plugin (upgrading to premium) while experiencing high bot traffic placing false orders on our website. Support has been very quick and helpful working with us to stop this issue. We have no complaints!

    Read on wp.org ↗

Latest updates

via wp.org changelog

Recent releases and news for this plugin

  1. — Version 2.2.9 New: Added reporter-authenticated subscription key activation for securely applying purchased Global Blacklist plans to the current site. New: Added a signed plan summary, server connection health, activation method, and 2.2.9
  2. — Version 2.2.10 New: Added a compact Global Blacklist order result with a secure server-hosted full-analysis view. New: Added Core-owned outcome automation for order lifecycle, merchant Block/Suspect/Remove actions, disputes, overrides, 2.2.10
  3. — Version 2.2.11 New: Negotiates identity normalization v3 with compatible Global Blacklist servers while preserving the v2 payload for older servers. Fix: Rechecks Global Blacklist email settings at render time and limits output strictl 2.2.11
  4. — Version 2.3.0 New: Adds one Core-owned checkout verification coordinator for Classic Checkout and Checkout Blocks, with Email before optional Premium Phone and shared Inline or Popup presentation. New: Adds privacy-safe site-local OTP 2.3.0
  5. — Version 2.3.1 Fix: Keeps Report v2 configuration current on long-lived WooCommerce order pages by renewing eligible capability state in the background and applying current local configuration to subsequent modal opens. Improve: Clarif 2.3.1
  6. — Version 2.3.2 New: Adds configurable security and operational email notifications for blocked or suspicious activity and Global Blacklist usage. Security: Strengthens blocked-user authentication, WooCommerce REST order protection, and 2.3.2

Security history

via Wordfence Intelligence

All 2 disclosed vulnerabilities are patched in the current version (2.4.0). Sites still on an older version should update.

  1. 2026-09-25 CVE-2026-88828 Protection Mechanism Failure Affects 1.3.0 - 2.3.1 Patched in 2.3.2
  2. 2026-09-24 CVE-2026-96838 Cross-Site Request Forgery Affects <= 2.3.1 Patched in 2.3.2

Vulnerability records provided by Wordfence Intelligence. Copyright 2012-2026 Defiant Inc. License and terms.

CVE records: Copyright 1999-2026 The MITRE Corporation. CVE terms of use.

Behavioral tests

via WP Hive

Automated install-time checks, tested on PHP 8.1.12 · WP 7.0.1

✓ Low memory footprint
✓ Low page-speed impact
✕ Runs on latest PHP + WP
✓ No PHP errors
✕ No JS errors
✓ Activates cleanly
✓ No resource errors
✓ No external HTTP errors
✓ Optimized database use
✕ Frequently updated

Languages

via translate.wordpress.org

Translated into 2 languages, 0 at 90% or more

Spanish (Spain) 84%
German 2%

AI assistants

How it's measured →

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

Not measured yet for this plugin’s topics. Its tracked searches are not among the measured topics. See the topics measured so far.

Readme readiness

8 of 8 pass · checked 29 Oct 2026

Can an assistant quote this readme? Eight deterministic checks over the wp.org listing, no model involved.

  • ✓ Says what it does "Block risky WooCommerce orders, spam signups, and form submissions with blacklist rules plus built-in check..."
  • ✓ Has a FAQ 8 questions in the FAQ.
  • ✓ FAQ asks real questions 8 of 8 read like questions a user would type.
  • ✓ Names who it is for Names its audience or use cases ("for stores", "use cases").
  • ✓ Names what it works with Mentions WooCommerce, Contact Form 7, WPForms, Gravity Forms and 6 more.
  • ✓ Headings and lists 9 headings and 6 lists.
  • ✓ Enough to quote 4,977 characters of description.
  • ✓ Tags match the text 3 of 5 tags appear in the text; "fraud prevention", "WooCommerce Anti-Fraud" do not.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

  1. 2025-09-21 1K+ → 2K+ up after 293 days in tier
  2. 2024-12-02 900+ → 1K+ up after 3 days in tier
  3. 2024-11-29 1K+ → 900+ down after 2 days in tier
  4. 2024-11-27 900+ → 1K+ up after 13 days in tier
  5. 2024-11-14 800+ → 900+ up after 18 days in tier
  6. 2024-10-27 700+ → 800+ up after 20 days in tier
  7. 2024-10-07 600+ → 700+ up after 2 days in tier
  8. 2024-10-05 700+ → 600+ down after 1 days in tier

Competes with

The plugins that solve the same job, ranked by shared tags then reach, closest match first. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification into a readme, a review or a deck. It updates itself.

<iframe src="https://plugins.wpmayor.com/embed/wc-blacklist-manager" width="480" height="300" style="border:0" loading="lazy" title="Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification — Plugin Pulse"></iframe>
Preview card ↗

Blacklist Manager – WooCommerce Anti-Fraud, Blacklist & Checkout Verification: 2K+ active installs, 3.6★ (14 reviews). Plugin Pulse (WP Mayor), as of 2026-10-31. https://plugins.wpmayor.com/plugin/wc-blacklist-manager

Spotted a number that looks wrong? Report a data issue and we'll check it against the source.