WP Manifestindependent plugin directory
manifest / ecommerce / block-automated-checkout

Block Automated Checkout WP Registry grade A. No security issues foundWP RegistryNo security issues foundOpen the reportA

Stops checkout abuse in Woo

★ 1stars
1.4.0latest · 8mo ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/littlebizzy/block-automated-checkout/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.

Stops checkout abuse in Woo

Changelog

1.4.0

  • added failed-order rate limiting for logged-in customers
  • blocks checkout for 24 hours after 3 failed orders within a 24-hour period
  • retains existing account-age and order-interval protections

1.3.0

  • added minimum time between orders requirement (default 1800 seconds)
  • blocks rapid repeat checkout attempts from the same logged-in account
  • keeps order interval setting filterable via block_automated_checkout_min_order_interval
  • improved timestamp handling for checkout timing validation
  • keeps minimum account age protection in place before checkout

1.2.0

  • added minimum account age requirement before checkout (default 300 seconds)
  • blocks immediate first-order attempts from newly registered accounts
  • improves protection against register-and-test card validation abuse

1.1.0

  • removed strict WooCommerce checkout nonce enforcement
  • relies on WooCommerce core nonce validation
  • retains session and cart validation safeguards
  • improves compatibility with cached or stale checkout sessions

1.0.0

  • initial release
  • supports PHP 7.0 to 8.3
  • supports Git Updater
  • Tested up to: 6.9
  • blocks checkout requests without a valid WooCommerce checkout nonce
  • blocks checkout requests without an active WooCommerce session or cart
  • mitigates scripted, stateless, non-interactive and non-browser checkout attempts
  • uses native WooCommerce notices for failed requests

Releases

5 releases.

Tag
Published
1.4.0 latest
Feb 21, 2026 8mo ago
Feb 20, 2026 8mo ago
Feb 19, 2026 8mo ago
Feb 14, 2026 8mo ago
Feb 1, 2026 8mo ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

A grade

Security

Block Automated Checkout 1.4.0 · audited by WP Registry

No security issues found.

Audited release
1.4.0
Findings
none
Worst severity
—
Content hash
bb5346f3ffd3cfdbf4059293…

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.