Fraud Prevention For WooCommerce and EDD

How well this listing is tuned to rank in WordPress.org search, on the factors an owner controls. Not popularity, optimization.

Directory searches this plugin turns up in, and which way each one is moving. WordPress.org publishes no history of search positions, so this starts the day we first tracked a keyword and never backfills.

wp.org is where the directory puts the plugin for that search. On merit is where it would sit if results were ranked on rating, support and updates, without the install boost. The last column is how far the wp.org position moved, from our first reading in the last 90 days to the latest.

85 searches this plugin appeared in over the last 90 days, 20 listed. 63 left out as unrelated or noise (years, numbers, stray words).

Directory rank vs rivals

wp.org popularity rank over time · higher is better · when a rival's line climbs above yours, they've overtaken you

Share of active installs on each version of this plugin · 84% run the current release. Green is the current release; a big slice on older versions is a user base that has stopped updating.

Crossed into this band 19 days ago and the previous band took 13 months to cross, so the real count is still just under 5K.

1. ★★★★★ Mike E

   12mo ago

   This plugin used to at least allow blocking specific email addresses, which was the entire reason I installed it. Now that basic function has been moved behind a “premium” wall for $199/year. Charging that much for what used to be a core feature feels predatory, not an upgrade. I’ve uninstalled and moved to a different solution. Would not recommend.

   Read on wp.org ↗
2. ★★★★★ Oliver Jusinger

   1.2y ago

   My requirement was only to block distinct email adresses on shop orders. This plugin works for that use-case out of the box for me, so I am happy with the free version.Most other advanced features are only available in the premium version which is fine to me. You have to search the few options which are available in the free version among the many disabled options – disabled options could be greyed out more to make it easier to recognize. This topic was modified 10 months, 4 weeks ago by Oliver Jusinger.

   Read on wp.org ↗
3. ★★★★★ onehcs

   1.6y ago

   Useless unless you pay them 130$, where did good free plugins go?

   Read on wp.org ↗
4. ★★★★★ kris006

   2.1y ago

   It does not work with PayPal plugin when you block the user he can pay with PayPal only after payment I do not accept his order woocommerce-paypal-payments This topic was modified 1 year, 9 months ago by kris006.

   Read on wp.org ↗
5. ★★★★★ mkerley12

   2.2y ago

   I’ve used this for more than a year now. It has an easy to use interface and it just works. Plus they are quick to respond to inquiries and fix any issues that arise. Couldn’t ask for more than that.

   Read on wp.org ↗
6. ★★★★★ moraima4

   2.2y ago

   I have been using this plugin for a few years now and I’m very satisfied. It does exactly what I need. Recently we had an issue of conflict with another plugin and support was super helpful, they didn’t stop until the issue was completely fixed. Even explaining some basic things that I wasn’t familiar with. And all this while I’m a free user. We are considering the premium version if we need more comprehensive fraud control.

   Read on wp.org ↗
7. ★★★★★ poletaew

   3.0y ago

   This plugin conflicts with other important plugins. So I won’t use it anymore.

   Read on wp.org ↗
8. ★★★★★ adz

   4.0y ago

   Tried to import our black list of email addresses (comma separated as it suggests) and it only will save the first email and ignore the rest.

   Read on wp.org ↗

Recent releases and news for this plugin

1. — Version 2.3.4 [Bug Fix] Security patch and fixes 2.3.4
2. — Version 2.3.3 [Bug Fix] Minor bug fixes [Enhancement] Compatible with WooCommerce 10.5.x [Enhancement] Compatible with WordPress 6.9.x 2.3.3
3. — Version 2.3.2 [Enhancement] Security patch and updated freemius SDK [Enhancement] Compatible with WooCommerce 10.4.x [Enhancement] Compatible with WordPress 6.9 2.3.2
4. — Version 2.3.1 [Bug Fix] Fixed strict comparison issue with configured values. 2.3.1
5. — Version 2.3.0 [Bug Fix] Undefined variable warning fix [Enhancement] Compatible with PHP 8.3 [Enhancement] Compatible with WooCommerce 10.3.x [Enhancement] Compatible with WordPress 6.8.x 2.3.0
6. — Version 2.2.4 [Bug Fix] Minor CSS-related fixes [New] Added reCAPTCHA on Checkout Page. [New] Added Blacklisting Options (Address, Country, Phone Number, Shipping Zone) [Enhancement] Plugin UI enhancement [Enhancement] Compatible with 2.2.4

All 6 disclosed vulnerabilities are patched in the current version (2.3.6). Sites still on an older version should update.

1. Patched Medium · 4.3 Fraud Prevention For WooCommerce and EDD <= 2.3.5 - Missing Authorization ↗
   2026-10-28 CVE-2026-118072 Missing Authorization Affects <= 2.3.5 Patched in 2.3.6
2. Patched High · 7.5 Fraud Prevention For WooCommerce and EDD <= 2.3.3 - Missing Authorization to Unauthenticated Arbitrary Content Deletion ↗
   2026-03-18 CVE-2026-25443 Missing Authorization Affects <= 2.3.3 Patched in 2.3.4
3. Patched Medium · 4.3 Fraud Prevention For Woocommerce <= 2.3.2 - Authenticated (Subscriber+) Information Exposure ↗
   2026-01-22 CVE-2026-24553 Exposure of Sensitive Information to an Unauthorized Actor Affects <= 2.3.2 Patched in 2.3.3
4. Patched Medium · 4.3 Woocommerce Blocker Lite <= 2.1.5 - Cross-Site Request Forgery ↗
   2023-07-26 CVE-2023-39159 Cross-Site Request Forgery Affects <= 2.1.5 Patched in 2.1.6
5. Patched Medium · 6.1 Freemius SDK <= 2.5.9 - Reflected Cross-Site Scripting via fs_request_get ↗
   2023-07-18 CVE-2023-33999 Improper Neutralization of Input During Web Page Generation Affects 1.8 - 2.1.4 Patched in 2.1.4.1
6. Patched Medium · 6.3 Freemius SDK <= 2.4.2 - Missing Authorization Checks ↗
   2022-03-04 CVE-2022-4974 Missing Authorization Affects < 2.1.0 Patched in 2.1.0

Whether ChatGPT and Claude name this plugin when asked the category question, and whether the readme gives them something to quote.

This plugin’s searches fall outside the topics measured so far. See the topics measured so far.

Growth timeline

Install-tier crossings we have observed, and how long each tier took to outgrow

1. 2026-10-18 5K+ → 4K+ down after 380 days in tier
2. 2025-10-03 4K+ → 5K+ up after 432 days in tier
3. 2024-07-28 5K+ → 4K+ down after 121 days in tier
4. 2024-03-29 4K+ → 5K+ up after 350 days in tier
5. 2023-04-14 3K+ → 4K+ up after 289 days in tier
6. 2022-06-29 2K+ → 3K+ up after 572 days in tier
7. 2020-12-04 1K+ → 2K+ up after 698 days in tier
8. 2019-01-06 900+ → 1K+ up after 92 days in tier

Competes with

The plugins that show up in the same WordPress.org searches, most shared searches first, then plugins sharing two or more tags. The letter on the right is each plugin's health grade (A best, F worst).

Embed this report card

Drop a live Pulse card for Fraud Prevention For WooCommerce and EDD into a readme, a review or a deck. It updates itself.

Fraud Prevention For WooCommerce and EDD: 4K+ active installs, 3.7★ (23 reviews). Plugin Pulse (WP Mayor), as of 2026-11-06. https://plugins.wpmayor.com/plugin/woo-blocker-lite-prevent-fake-orders-and-blacklist-fraud-customers