Title: Precise Expressions Checkout Abuse Protection for WooCommerce Author: preciseexpressions Published: 4 juillet 2026 Last modified: 15 octobre 2026 --- Recherche d’extensions ![](https://ps.w.org/precise-expressions-checkout-abuse-protection/assets/banner- 772x250.png?rev=3595612) ![](https://ps.w.org/precise-expressions-checkout-abuse-protection/assets/icon-256x256. png?rev=3595612) # Precise Expressions Checkout Abuse Protection for WooCommerce Par [preciseexpressions](https://profiles.wordpress.org/preciseexpressions/) [Télécharger](https://downloads.wordpress.org/plugin/precise-expressions-checkout-abuse-protection.1.0.2.zip) * [Détails](https://fr.wordpress.org/plugins/precise-expressions-checkout-abuse-protection/#description) * [Avis](https://fr.wordpress.org/plugins/precise-expressions-checkout-abuse-protection/#reviews) * [Installation](https://fr.wordpress.org/plugins/precise-expressions-checkout-abuse-protection/#installation) * [Développement](https://fr.wordpress.org/plugins/precise-expressions-checkout-abuse-protection/#developers) [Support](https://wordpress.org/support/plugin/precise-expressions-checkout-abuse-protection/) ## Description Precise Expressions Checkout Abuse Protection for WooCommerce helps mitigate automated checkout abuse and card-testing activity on WooCommerce stores. This lightweight Lite version provides essential, always-on protection for both classic and block checkout without relying on third-party services. It is designed to reduce automated pressure on checkout endpoints while remaining simple, privacy-aware, and low-overhead. ### What the Lite Version Protects Against * Automated checkout submission bursts. * Repeated failed-payment retry attempts (common in card testing). * Unrealistically fast checkout submissions (timing signal). * Hidden field abuse via an invisible honeypot (classic checkout). * Excessive retries from a single IP. The Lite version focuses on practical mitigation that store owners can enable quickly, without complex configuration. ### Pro Version A Pro add-on is available separately for stores that need detailed event logs, alerts, exports, and advanced reporting. The Lite version is fully functional on its own and does not require Pro. ### Features (Lite Version) * Always-on checkout protection for classic and block checkout. * Checkout submission rate limiting. * Failed-payment retry throttling. * Invisible timing-based bot signal. * Invisible honeypot signal (classic checkout only). * IP and role allowlist controls. * Aggregate dashboard metrics (today / last 7 days / top reasons). * No third-party service dependency. * Privacy-aware by default (no persistent event logs in Lite). ### Privacy This plugin: * Does **not** send data to third parties. * Stores aggregate blocked-attempt counts only (by day and reason) in the Lite version. * Does not store raw IP addresses in persistent logs. * Stores user-provided allowlist IPs exactly as entered in settings. The Pro version stores structured event records for reporting purposes, without storing raw IP addresses or unnecessary personal data. ## Captures d’écrans [⌊Settings page: enable checkout and failed-payment protection, manage the IP/role allowlist, adjust advanced thresholds, and set the uninstall data policy.⌉⌊Settings page: enable checkout and failed-payment protection, manage the IP/role allowlist, adjust advanced thresholds, and set the uninstall data policy.⌉[ Settings page: enable checkout and failed-payment protection, manage the IP/role allowlist, adjust advanced thresholds, and set the uninstall data policy. [⌊Report dashboard: blocks today, blocks in the last 7 days, protection status, and a reason breakdown — shown here during a live self-check intercepting repeated checkout attempts.⌉⌊Report dashboard: blocks today, blocks in the last 7 days, protection status, and a reason breakdown — shown here during a live self-check intercepting repeated checkout attempts.⌉[ Report dashboard: blocks today, blocks in the last 7 days, protection status, and a reason breakdown — shown here during a live self-check intercepting repeated checkout attempts. ## Installation 1. Ensure WooCommerce is installed and active. 2. Upload the plugin files to the `/wp-content/plugins/precise-expressions-checkout- abuse-protection/` directory, or install the plugin through the WordPress Plugins screen. 3. Activate the plugin through the Plugins screen in WordPress. 4. Go to WooCommerce > Bot Protection to review settings and run the self-check. ## FAQ ### How do trusted proxies work? By default, `REMOTE_ADDR` is authoritative. Configure `PE_WCBP_TRUSTED_PROXY_IPS` or the `pe_wcbp_trusted_proxy_ips` filter only for proxies you operate and trust. Exact IPv4/IPv6 addresses and CIDR ranges are supported. Forwarded headers are considered only behind those proxies; the shopper IP allowlist remains exact-IP only. Cloudflare and reverse-proxy users may need to configure their actual proxy ranges—do not trust broad private or proxy ranges blindly. ### Will this stop all fraud? No. This plugin is a mitigation layer designed to reduce automated abuse and card- testing attempts. It should be used alongside payment gateway risk controls, fraud prevention settings, and appropriate hosting security measures. ### Does it slow down checkout? The Lite version is designed to be lightweight and low-overhead. It performs simple checks before payment processing and stores only aggregate counters. ### Is it compatible with WooCommerce block checkout? Yes. The Lite version includes Store API checkout protection for rate limiting, timing checks, and failed-payment throttling. The classic checkout honeypot signal applies to classic checkout only. ### Does it require CAPTCHA? No. The Lite version does not integrate CAPTCHA or third-party anti-bot services. ### Is the Pro version required? No. The Lite version functions independently and provides essential checkout abuse mitigation. The Pro add-on provides additional monitoring, reporting, and response capabilities. ## Avis Il n’y a aucun avis pour cette extension. ## Contributeurs/contributrices & développeurs/développeuses « Precise Expressions Checkout Abuse Protection for WooCommerce » est un logiciel libre. Les personnes suivantes ont contribué à cette extension. Contributeurs * [ preciseexpressions ](https://profiles.wordpress.org/preciseexpressions/) [Traduisez « Precise Expressions Checkout Abuse Protection for WooCommerce » dans votre langue.](https://translate.wordpress.org/projects/wp-plugins/precise-expressions-checkout-abuse-protection) ### Le développement vous intéresse ? [Parcourir le code](https://plugins.trac.wordpress.org/browser/precise-expressions-checkout-abuse-protection/), consulter le [SVN dépôt](https://plugins.svn.wordpress.org/precise-expressions-checkout-abuse-protection/), ou s’inscrire au [journal de développement](https://plugins.trac.wordpress.org/log/precise-expressions-checkout-abuse-protection/) par [RSS](https://plugins.trac.wordpress.org/log/precise-expressions-checkout-abuse-protection/?limit=100&mode=stop_on_copy&format=rss). ## Journal des modifications #### 1.0.2 * Hardened client-IP resolution for rate limiting and allowlists with explicit trusted-proxy support. * Added IPv4/IPv6 CIDR trusted-proxy support and preserved resolved IPs in Checkout Block/Store API handling. * Declared HPOS compatibility and validated compatibility with WordPress 7.1 and WooCommerce 11.1. #### 1.0.1 * Removed mode switching and moved to a single always-on protection profile. * Added « Reset to Defaults » action in settings. * Added Store API/block checkout protection hooks. * Updated timing signal behavior to refresh on each checkout page render. #### 1.0.0 * Initial release. * Classic and block checkout protection with rate limiting and timing checks. * Classic checkout honeypot signal. * Failed payment throttling, allowlist, settings, and aggregate dashboard. * Pro-ready extension points. ## Méta * Version **1.0.2** * Dernière mise à jour **il y a 1 jour** * Installations actives **Moins de 10** * Version de WordPress ** 6.2 ou plus ** * Testé jusqu’à **7.1.3** * Version de PHP ** 7.4 ou plus ** * Langue * [English (US)](https://wordpress.org/plugins/precise-expressions-checkout-abuse-protection/) * Étiquettes * [anti-spam](https://fr.wordpress.org/plugins/tags/anti-spam/)[checkout](https://fr.wordpress.org/plugins/tags/checkout/) [rate limit](https://fr.wordpress.org/plugins/tags/rate-limit/)[woocommerce](https://fr.wordpress.org/plugins/tags/woocommerce/) * [Vue avancée](https://fr.wordpress.org/plugins/precise-expressions-checkout-abuse-protection/advanced/) ## Évaluations Aucun avis n’a encore été envoyé. [Votre avis](https://wordpress.org/support/plugin/precise-expressions-checkout-abuse-protection/reviews/#new-post) [Tout voir](https://wordpress.org/support/plugin/precise-expressions-checkout-abuse-protection/reviews/) ## Contributeurs * [ preciseexpressions ](https://profiles.wordpress.org/preciseexpressions/) ## Support Quelque chose à dire ? Besoin d’aide ? [Voir le forum de support](https://wordpress.org/support/plugin/precise-expressions-checkout-abuse-protection/)