This is an info Alert.
x402 Logo
  • Product
    • Become Agent-Ready
      • Merchants
        Agentic Commerce — list your store across ChatGPT, Gemini, Claude & Perplexity
      • Publishers
        Monetize your content when AI agents read, cite, or train on it
      • SaaS Companies
        Treat AI agents as first-class customers with agent-priced checkout
    • Monetize
      • Monetize MCP Server
        Charge per call on any MCP server in 2 minutes
      • Monetize AI Agents
        Turn n8n, Zapier, Activepieces workflows into revenue
      • Agent Feed
        Pay-per-query access to licensed publisher content for your agents
  • Resources
    • xpay Ecosystem
      • xpay✦ Tools
        1,000+ pay-per-use tools for your AI agents
      • Agent-Ready SaaS Index
        25,481 SaaS scored on agent-buyability
      • SaaS Pricing Database
        Pricing pages indexed across 1,000+ categories
      • Shopify Apps Directory
        Every Shopify app, with its full review history
      • WooCommerce Plugins Directory
        Every WooCommerce plugin, scored on how well it is maintained
      • GitHub
        Open source repositories
    • Agent Building
      • Agent Frameworks
        AI frameworks for building multi-agent systems
      • x402 Integration
        AI frameworks with x402 payment integration
      • Networks
        Blockchain networks supporting x402
    • Company
      • About xpay✦
        Our mission, products, and protocols
      • Blog
        Latest insights and updates
      • Docs
        Complete xpay documentation
  • Pricing
  • Blog
  • Docs
Get Started

  1. xpay✦ Commerce

  3. Directory

  5. WooCommerce plugins

  7. Bot Protector for PayPal for WooCommerce

Bot Protector for PayPal for WooCommerce

Protect your WooCommerce PayPal checkout from bot attacks, card-testing, and fake failed orders.

20+ active installsFree on WordPress.org
View on WordPress.orgSupport forum
Will this break my store?

What the WordPress.org registry says about keeping Bot Protector for PayPal for WooCommerce running.

WordPress compatibility
Tested to 6.9.5 — 1 branch behind 7.0
Tested against the WordPress branch in use today.
Last updated
8 months ago
Requires PHP
7.4
Your host must be running at least this version.
Requires WordPress
5.8
Requires other plugins
woocommerce
These must be installed and active first.
Contributors
1
A single maintainer. Worth knowing if the plugin is load-bearing for your store.
20+ active installsWordPress.org reports installs in bands, not exact counts.
Maintenance & trust

Scored on how Bot Protector for PayPal for WooCommerce is looked after — not on how many stores run it.

Solid
Not enough public feedback to put a confident number on this one. Little public feedback — score rests mostly on release activity. What we can see is below.
Maintenance
26 / 35
Updated 226 days ago.
WordPress compatibility
14 / 20
Tested to WP 6.9.5, 1 branch(es) behind.
Support responsiveness
Not enough data
Only 0 support thread(s) — not enough to judge.
Merchant satisfaction
Not enough data
No ratings yet.
Listing transparency
10 / 10
Provides: screenshots, description, homepage
2 of 5 measures had too little evidence to score. They are left out of the total rather than counted as zero — otherwise a plugin would be marked down for being small rather than for being poorly kept.Measured 2026-08-02 from the WordPress.org plugin registry.
Ratings

No one has rated this plugin on WordPress.org yet. That is a statement about the ratings page, not about the plugin — plenty of well-kept plugins never collect them.

Bot Protector for PayPal for WooCommerce helps store owners automatically block bot attacks, checkout spam, card-testing, and PayPal checkout abuse that generates repeated failed orders.

This plugin monitors suspicious traffic hitting:

  • PayPal checkout requests
  • wc-ajax=checkout
  • WooCommerce Store API endpoints
  • Automated card-testing sequences

It then blocks them based on:

  • Adaptive rate limiting
  • Automatic IP banning
  • User-agent and referer validation
  • Optional Cloudflare Turnstile CAPTCHA
  • Logging and monitoring

No setup required — activate it and your store is instantly protected.

External services

This plugin connects to Cloudflare Turnstile API to verify CAPTCHA responses when the Turnstile feature is enabled. This service is used to validate that checkout attempts are made by humans rather than bots.

When Turnstile is enabled, the plugin sends the CAPTCHA response token to Cloudflare’s servers for verification. This occurs during checkout validation when a customer submits the checkout form with a Turnstile widget.

This service is provided by Cloudflare: Terms of Service, Privacy Policy

Features

  • Lightweight bot firewall for PayPal checkout
  • Rate limiting per IP
  • Temporary automatic IP bans
  • Blocks REST-based checkout attacks
  • Blocks PayPal card-testing bots
  • Turnstile CAPTCHA support
  • Whitelist trusted IP addresses
  • Admin log viewer
  • No performance impact
  • Works with all PayPal gateways for WooCommerce

Donations

Support continued development ❤️
https://www.paypal.com/ncp/payment/EP3HAP53U4MFU

Will it block real customers?

No. It blocks only IPs showing strong bot behavior (no user agent, no referer, too many attempts, rapid API calls).

Does it work with any PayPal plugin for WooCommerce?

Yes — it is fully compatible with all PayPal payment gateway plugins.

Can it prevent API-based card testing?

Yes, it specifically targets automated card-testing and checkout spamming.

Does it store personal customer data?

No. It logs only basic IP events required for security.

What data is sent to Cloudflare Turnstile?

When Turnstile CAPTCHA is enabled, the plugin sends the CAPTCHA response token to Cloudflare for verification. No personal customer data is transmitted.

Categories
CheckoutPayment gatewaysSecurity & spam
Plugin details
Version1.0
Last updated2025-12-19 2:15pm GMT
Added2025-12-19
Requires WordPress5.8
Tested up to6.9.5
Requires PHP7.4
Tags on WordPress.org
checkout
firewall
payments
paypal
security
Alternatives
Other plugins in the same categories.
Checkout Field Editor (Checkout Manager) for WooCommerce
400K+ installs
4.9(1,056)
Wallet for WooCommerce
20K+ installs
4.7(188)
Checkout Field Manager (Checkout Manager) for WooCommerce
80K+ installs
4.5(781)
Sliding Cart for WooCommerce by FunnelKit – Skip Cart & Reach WooCommerce Checkout Faster
30K+ installs
5.0(108)
YayPricing – WooCommerce Dynamic Pricing & Discounts
3K+ installs
5.0(71)
WPFunnels – Funnel Builder for WooCommerce with Checkout & One Click Upsell
5K+ installs
4.9(171)
x402 Logo

The agent-readiness stack for the AI shopping era — helping merchants, publishers and SaaS companies get discovered, cited and transacted with by ChatGPT, Perplexity, Claude, Gemini and the custom shopping agents underneath them.

CompanyAgentically Inc. (d/b/a xpay✦)1875 Mission St, Ste 103San Francisco, CA 94103, United Stateslegal@xpay.sh · privacy@xpay.sh
or ask your AI app
Company
About xpayAgency PartnersGitHubDiscordllms.txt
DevelopersDocumentationAPI ReferenceSDKs & LibrariesQuickstart GuideOpenAPI Spec
Stay Updated
Occasional product updates and agent-readiness playbooks from xpay (Agentically Inc.) — typically a couple of emails a month. Double opt-in: we email you a link to confirm before sending anything, and every email has one-click unsubscribe.
Social
  • For Publishers
    • News
    • Finance
    • Dev / Tech
    • Travel
    • View all verticals
  • Agent Feed
    • AI Search Engines
    • RAG Builders
    • Browser Agents
    • Vertical Research
    • Browse full catalog
  • Agent-Ready Index
    • SaaS Pricing Database
    • Agent-Ready SaaS Index
    • Verified band
    • AI & ML
    • Sales & CRM
  • Products
    • Pricing Widget
    • Monetize MCP Server
    • Paywall
    • Smart Proxy
    • Monetize AI Agents
    • xpay x402 Facilitator
  • Agentic Economy
    • Timeline
    • Resources
    • Manifesto
    • Stack
  • Agentic Commerce
    • Get listed
    • ChatGPT Ads
    • How ChatGPT Ads work
    • ChatGPT Ads · Apparel
    • ChatGPT Ads · Health & Beauty
    • xpay Listings · Amazon + Google
    • Pricing
    • Free audit
    • Shopify
    • WooCommerce
    • Apparel & Accessories
    • Health & Beauty
    • Overview
  • Commerce Index
    • Shopify apps directory
    • Agentic Commerce Ready Index
    • Methodology
    • Pet brands · WooCommerce
    • Pet brands · Shopify
  • Marketplace
    • 🛍️ xpay.deals — agentic storefront for deals
  • Protocols
    • Overview
    • x402
    • MPP
    • UCP
    • ACP
    • AP2
    • TAP
    • A2A
  • Agent Frameworks
    • Overview
    • LangChain
    • CrewAI
    • Claude MCP
    • AutoGPT
    • LangChain vs Mastra
    • LangGraph vs Pydantic AI
  • Company
    • About xpay
    • Blog
    • Docs
    • GitHub
  • Free prompts
    • Ecommerce prompts
    • Email marketing prompts
    • Product description prompts
    • Facebook ad prompts
    • Skincare prompts
    • Supplement prompts
    • Wine prompts
    • Electronics prompts
© 2025 Agentically Inc. All rights reserved.
Privacy PolicyTerms of UseAcceptable Use Policy