Active installationsNewAdoption metric — not a quality score
WordPress.org ratingNo WordPress.org ratings yet
Official packageDirect from WordPress.org
Repository metrics are context, not quality scores. Active installations measure adoption and can strongly reflect a plugin’s age and historical popularity. Ratings, recent updates and “Tested up to” metadata also do not guarantee modern code, error-free operation, security, feature completeness or suitability for a particular site. Why active installs don’t tell the whole story →
WP PlugIndex currently records Anti-Carding & Bot Shield for WooCommerce (Stop Card Testing Attacks) version 1.0.1 as active, updated 6d ago and tested up to WordPress 7.1.
Overview
About this plugin
Woke up to thousands of $1 failed transactions and a Stripe account warning?
50 per attempt).
Works out of the box with zero configuration:
– Instant Protection: Honeypot, HMAC timestamp validation, and RAM-based IP rate limiting are active immediately upon activation.
– Cloudflare Turnstile Ready (BYOK): Optional frictionless bot challenge with zero vendor lock-in.
– Dual-Shield Architecture: Fully compatible with Classic Checkout and modern WooCommerce Checkout Blocks (Store API).
– Zero Bloat: Runs entirely in RAM (Transients API / Redis / Memcached). No custom database tables.
Privacy Policy & External Services
This plugin integrates with Cloudflare Turnstile to protect your checkout against card testing and automated bot abuse.
Service: Cloudflare Turnstile
Provider: Cloudflare, Inc.
Service Description: Frictionless, privacy-preserving bot detection challenge.
Terms of Service: https://www.cloudflare.com/website-terms/
Data Transmitted: During checkout, the customer’s IP address and Turnstile response token are transmitted to Cloudflare’s validation endpoint ( https://challenges.cloudflare.com/turnstile/v0/siteverify ) to verify whether the submission is from a legitimate human. Store owners use their own Cloudflare account credentials (BYOK).
WordPress.org metadata
Plugin tags
Topics listed for this plugin in the WordPress.org directory.
bot protection
card testing
carding attack
checkout rate limit
stripe fraud
Compatibility & maintenance
Compatibility & maintenance
Tested with WP 7.1
Marked as tested with the current WordPress 7.1 release.
Current WordPress releaseWordPress 7.1
WordPress.org Tested up to7.1
Minimum requirementsWordPress 6.0 · PHP 7.4
Update activity27 Oct 20266d ago
“Tested up to” is directory metadata supplied by the plugin author. WP PlugIndex does not turn an older declaration into a claim that the plugin is incompatible.
Changes recorded by WP PlugIndex
Recent tracked changes
WordPress compatibility6.7.10→7.1.4
Version1.0.0→1.0.1
WordPress compatibility7.1.2→6.7.10
WordPress requirement5.8→6.0
Tracking & source
WP PlugIndex tracks public WordPress.org directory metadata and records selected version, compatibility and availability changes as they are detected.
