Auto Assign Guest Orders WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Auto Assign Guest Orders is a free WordPress plugin that links WooCommerce guest orders to customer accounts with matching email addresses.

Features

• Links exact-email guest orders after successful login
• Keeps registration and new-checkout assignment behind email verification
• Assigns new guest checkouts to a verified account with the same email
• Supports classic checkout and the Checkout Block/Store API
• Uses WooCommerce CRUD APIs and supports High-Performance Order Storage (HPOS)
• Preserves WooCommerce download permissions and customer statistics
• Defers to WooCommerce's native customer email verification when available
• Supports standard and headless WordPress authentication flows
• Adds no settings, tracking, external requests, or build step

Requirements

• WordPress 6.0 or newer
• PHP 7.4 or newer
• WooCommerce 7.0 or newer

Installation

1. Download auto-assign-guest-orders-1.1.3.zip from the latest GitHub release.
2. In WordPress, open Plugins > Add New > Upload Plugin.
3. Select the ZIP, install it, and activate Auto Assign Guest Orders.
4. Keep WooCommerce active. The plugin works automatically.

You can also clone this repository into wp-content/plugins/auto-assign-guest-orders.

How it works

After a successful login, the plugin uses WooCommerce's own exact-email past-order relinking API. That API keeps downloadable-product permissions, order counts, spending totals, and compatibility hooks correct.

Registration-time linking and assignment of newly placed guest orders still require email verification. On WooCommerce versions without native customer email verification, the plugin sends a one-time verification link for those flows.

WooCommerce 11 and newer link past orders after the customer verifies their email. This plugin detects that flow, requests the native verification email when needed, and relinks verified accounts if the original verification hook was missed.

Headless sites with a separate, trusted email-verification flow can integrate with the verification decision:

add_filter(
    'auto_assign_guest_orders_is_email_verified',
    function ( $verified, $user ) {
        return $verified || my_app_has_verified_email( $user->ID );
    },
    10,
    2
);

Return true only after the external flow has proved ownership of the account's current email address.

For new checkouts, the plugin assigns an otherwise guest order when its billing email belongs to a verified WordPress account. Both classic checkout and the Checkout Block are supported.

Headless account APIs should call Auto_Assign_Guest_Orders::assign_past_orders( $user_id ) before querying an authenticated customer's orders. This covers token-based requests that do not fire WordPress's wp_login action. Use Auto_Assign_Guest_Orders::is_user_email_verified( $user_id ) to show an email-verification prompt instead of an unexplained empty order history.

Security and privacy

Order ownership is determined by exact email matching only after account email ownership is verified. Verification links are hashed at rest, expire after one day, and work only while signed in as the target account.

The plugin stores only temporary verification data and the verified email in WordPress user metadata. It does not add database tables, collect analytics, or contact external services.

Development

The production source is maintained in the coded-letter-monorepo and released to this public repository. The plugin has no build step.

Validate PHP changes with:

php -l auto-assign-guest-orders.php

License

Auto Assign Guest Orders is free software licensed under the GNU General Public License v2.0 or later.