{"id":3150,"date":"2020-10-27T21:20:59","date_gmt":"2020-10-27T21:20:59","guid":{"rendered":"https:\/\/www.futurestatemedia.com\/?p=3150"},"modified":"2021-03-17T14:59:44","modified_gmt":"2021-03-17T14:59:44","slug":"woocommerce-security-checklist-plugins-hosting","status":"publish","type":"post","link":"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/","title":{"rendered":"WooCommerce Security Issues, Checklist, Plugins &#038; Hosting"},"content":{"rendered":"<p class=\"wp-block-paragraph\">This WooCommerce Security Guide for Store Owners NOT Tech Geeks is a Work In Progress &#8211; and probably always will be to a certain degree. Some topics are age old classics, meanwhile some WooCommerce and WordPress security topics and very transient.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This Security Guide for WooCommerce is therefore worth bookmarking for future as we&#8217;ll update with the latest information to keep your WooCommerce store, you, and your customer&#8217;s data safe.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If it\u2019s Fraud Prevention for WooCommerce you\u2019re looking for, you should checkout our <a href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-fraud-prevention-detection-plugins\/\">WooCommerce Fraud Protection Guide<\/a> including <a href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-fraud-prevention-detection-plugins\/\">recommended WooCommerce Anti-fraud Plugins<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This security guide for WooCommerce will focus solely on protecting your WooCommerce site from Hackers, Bots and Malware to name a few.<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Security_Types\"><\/span>WooCommerce Security Types<span class=\"ez-toc-section-end\"><\/span><\/h2><div id=\"ez-toc-container\" class=\"ez-toc-v2_0_86 counter-hierarchy ez-toc-counter ez-toc-white ez-toc-container-direction\">\n<p class=\"ez-toc-title\" style=\"cursor:inherit\">Table of Contents<\/p>\n<label for=\"ez-toc-cssicon-toggle-item-6a8368a203982\" class=\"ez-toc-cssicon-toggle-label\"><span class=\"\"><span class=\"eztoc-hide\" style=\"display:none;\">Toggle<\/span><span class=\"ez-toc-icon-toggle-span\"><svg style=\"fill: #999;color:#999\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" class=\"list-377408\" width=\"20px\" height=\"20px\" viewbox=\"0 0 24 24\" fill=\"none\"><path d=\"M6 6H4v2h2V6zm14 0H8v2h12V6zM4 11h2v2H4v-2zm16 0H8v2h12v-2zM4 16h2v2H4v-2zm16 0H8v2h12v-2z\" fill=\"currentColor\"><\/path><\/svg><svg style=\"fill: #999;color:#999\" class=\"arrow-unsorted-368013\" xmlns=\"http:\/\/www.w3.org\/2000\/svg\" width=\"10px\" height=\"10px\" viewbox=\"0 0 24 24\" version=\"1.2\" baseprofile=\"tiny\"><path d=\"M18.2 9.3l-6.2-6.3-6.2 6.3c-.2.2-.3.4-.3.7s.1.5.3.7c.2.2.4.3.7.3h11c.3 0 .5-.1.7-.3.2-.2.3-.5.3-.7s-.1-.5-.3-.7zM5.8 14.7l6.2 6.3 6.2-6.3c.2-.2.3-.5.3-.7s-.1-.5-.3-.7c-.2-.2-.4-.3-.7-.3h-11c-.3 0-.5.1-.7.3-.2.2-.3.5-.3.7s.1.5.3.7z\"\/><\/svg><\/span><\/span><\/label><input type=\"checkbox\"  id=\"ez-toc-cssicon-toggle-item-6a8368a203982\" checked aria-label=\"Toggle\" \/><nav><ul class='ez-toc-list ez-toc-list-level-1' ><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-1\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Security_Types\" >WooCommerce Security Types<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-2\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Preventative_Measures\" >Preventative Measures<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-3\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Risk_Mitigation_Measures\" >Risk Mitigation Measures<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-4\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Curative_Measures\" >Curative Measures<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-5\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Security_Issues_%E2%80%93_The_Different_Types\" >WooCommerce Security Issues &#8211; The Different Types<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-6\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Brute_Force_Attacks_on_WooCommerce\" >Brute Force Attacks on WooCommerce<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-7\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#File_Inclusion_Exploits_on_WooCommerce\" >File Inclusion Exploits on WooCommerce<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-8\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#SQL_Injections\" >SQL Injections<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-9\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Cross-Site_Scripting_XSS\" >Cross-Site Scripting (XSS)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-10\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Malware\" >Malware<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-11\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Web_Application_Firewalls_WAF_%E2%80%93_How_many_Firewalls_does_WordPress_need\" >WooCommerce Web Application Firewalls (WAF) &#8211; How many Firewalls does WordPress need?!<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-12\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Security_Plugin_Firewalls\" >WooCommerce Security Plugin Firewalls<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-13\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Hosting_Firewalls\" >WooCommerce Hosting Firewalls<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-14\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Online_Web_Application_Firewalls\" >Online Web Application Firewalls<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-15\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_captcha_reCaptcha_for_WooCommerce\" >WooCommerce captcha &amp; reCaptcha for WooCommerce<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-16\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Security_Plugins_%E2%80%93_Essential_Functionality\" >WooCommerce Security Plugins &#8211; Essential Functionality<\/a><ul class='ez-toc-list-level-3' ><li class='ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-17\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#Web_Application_Firewalls_hosted_on_your_WordPress_installation\" >Web Application Firewalls (hosted on your WordPress installation)<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-3'><a class=\"ez-toc-link ez-toc-heading-18\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#captcha_reCaptcha_Form_Checkout_Protection_for_WooCommerce\" >captcha &amp; reCaptcha Form &amp; Checkout Protection for WooCommerce<\/a><\/li><\/ul><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-19\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Security_Plugins_Reviewed_Compared\" >WooCommerce Security Plugins Reviewed &amp; Compared<\/a><\/li><li class='ez-toc-page-1 ez-toc-heading-level-2'><a class=\"ez-toc-link ez-toc-heading-20\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#WooCommerce_Backup_Plugins_Reviewed_Compared\" >WooCommerce Backup Plugins Reviewed &amp; Compared<\/a><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><ul class='ez-toc-list-level-4' ><li class='ez-toc-heading-level-4'><a class=\"ez-toc-link ez-toc-heading-21\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/#You_may_have_searched_for\" >You may have searched for:<\/a><\/li><\/ul><\/li><\/ul><\/li><\/ul><\/nav><\/div>\n\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Preventative_Measures\"><\/span>Preventative Measures<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Preventing Security Breaches and keeping your site safe from hackers, bots and attacks.<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Risk_Mitigation_Measures\"><\/span>Risk Mitigation Measures<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Backups for restoration making it quick and easy to restore your WooCommerce store in a safe and secure manner.<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Curative_Measures\"><\/span>Curative Measures<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Cleaning up compromised WooCommerce websites.<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Security_Issues_%E2%80%93_The_Different_Types\"><\/span>WooCommerce Security Issues &#8211; The Different Types<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Brute_Force_Attacks_on_WooCommerce\"><\/span>Brute Force Attacks on WooCommerce<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Brute force attacks focus their attention on the WordPress login page. Repeated attempts using different combinations of username and password may well be unsuccessful in terms of logging in but this additional load on your website&#8217;s servers can result in your website slowing or even crashing.<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"File_Inclusion_Exploits_on_WooCommerce\"><\/span>File Inclusion Exploits on WooCommerce<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Coming soon<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"SQL_Injections\"><\/span>SQL Injections<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Coming soon<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Cross-Site_Scripting_XSS\"><\/span>Cross-Site Scripting (XSS)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Coming soon<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Malware\"><\/span>Malware<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Coming Soon<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Web_Application_Firewalls_WAF_%E2%80%93_How_many_Firewalls_does_WordPress_need\"><\/span>WooCommerce Web Application Firewalls (WAF) &#8211; How many Firewalls does WordPress need?!<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Without going into the detail of exactly <a href=\"https:\/\/www.cloudflare.com\/en-gb\/learning\/ddos\/glossary\/web-application-firewall-waf\/\" target=\"_blank\" rel=\"noreferrer noopener\">what is a Web Application Firewall<\/a>, just trust me when I say it&#8217;s there to keep the bad guys out.<\/p>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Security_Plugin_Firewalls\"><\/span>WooCommerce Security Plugin Firewalls<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">Most WordPress and WooCommerce Security Plugins claim to have firewall capabilities. This is the &#8220;last line of defence&#8221; type of Web Application Firewall (WAF).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In essence when using a WordPress or WooCommerce Security plugin to provide a firewall for your eCommerce store you&#8217;re still initialising WordPress BEFORE the Firewall kicks in. This means if you have any underlying vulnerabilities your WooCommerce store could be susceptible to penetration by hackers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Security vulnerabilities could be in the form of outdated plugins, outdated WordPress core, or plugins that have had a recent vulnerability exploited that&#8217;s not yet patched. (This is also why a bunch of WooCommerce Security Plugins offer &#8220;vulnerability scanning&#8221; to try and help you identify these potential issues before they&#8217;re exploited).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So having a firewall generated by a WordPress Security Plugin on your WooCommerce store is great idea. But understand this is a last line of defence and not a complete WooCommerce security solution.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Who&#8217;s responsible for this WAF?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">YOU ARE<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Hosting_Firewalls\"><\/span>WooCommerce Hosting Firewalls<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce hosting providers have it in their interest to keep the bad guys out too (the hackers of course). The best WooCommerce Hosting Providers want to keep their clients safe and secure on their hosting servers, so they also typically have a WAF or Web Application Firewall that sits on the server and sites between your site and internet browsers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This still means that hackers are hitting your server, or server cluster &#8211; but they&#8217;re at a bigger distance than if you were JUST relying on your WooCommerce Security Plugin&#8217;s self-hosted firewall.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is where your hosting provider typically takes care of a lot of the sophistication.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Even the above simplified explanation of how this works isn&#8217;t entirely technically accurate. But this Security Guide for WooCommerce isn&#8217;t written for the guys manging WAFs it&#8217;s written for store owners. So the principles above are good enough to work with.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">You&#8217;ve now got 2 firewalls, and the second has put a nice big fence around your property &#8211; but the hackers still know where you live!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Who&#8217;s responsible for this WAF?<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">YOUR HOST IS<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Online_Web_Application_Firewalls\"><\/span>Online Web Application Firewalls<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">So again, if you&#8217;re a geeky tech gal please don&#8217;t think badly of me &#8211; I&#8217;m making this WooCommerce Security Guide store owner friendly!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This level of Web Application Firewall puts a big distance between your WooCommerce store and the hacker.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In essence the hacker is hitting a completely different web space location to where your site is hosted &#8211; the hacker no-longer knows where you live!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This concept might not be unfamiliar to you &#8211; having your data distributed and served from multiple locations whilst your website sits on a server somewhere remote from the end user.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">I am of course talking about a CDN or Content Delivery Network.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In a lot of cases you&#8217;ll see CDNs go hand in hand with WAFs.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is because essentially the infrastructure for a CDN is highly aligned with Online Web Application Firewalls.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">A widely used example would be <a href=\"https:\/\/www.cloudflare.com\/en-gb\/cdn\/\" target=\"_blank\" rel=\"noreferrer noopener\">CloudFlare CDN<\/a> which has both a free and a paid version.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">With a paid upgrade you can get access to a bunch of additional features including a <a href=\"https:\/\/www.cloudflare.com\/en-gb\/waf\/\" target=\"_blank\" rel=\"noreferrer noopener\">Web Application Firewall <\/a>that sits separate from your WooCommerce store AND your Hosting Servers.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are a bunch of other services that CloudFlare offer that once again are facilitated by the fact they have a network of essentially data hubs distributed across the globe.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">They have a specific offering also related to DDoS attacks. Also known as Distributed Denial of Service attacks.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">If you&#8217;ve seen Disney&#8217;s &#8216;Ralph Breaks The Internet&#8217; the attack by the &#8220;Ralph Clones&#8221; towards the end of the Movie is what I&#8217;m talking about here where essentially your site gets swamped in an attempt to prevent anyone else from accessing it.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This is somewhat related to Web Application Firewalls &#8211; but a different topic so I thought I&#8217;d just highlight there&#8217;s a difference between WAF and DDoS protection. <a rel=\"noreferrer noopener\" href=\"https:\/\/www.cloudflare.com\/en-gb\/ddos\/\" target=\"_blank\">CloudFlare offer both DDoS Protection<\/a> and Web Application Firewalls.<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_captcha_reCaptcha_for_WooCommerce\"><\/span>WooCommerce captcha &amp; reCaptcha for WooCommerce<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">We&#8217;re all familiar with the Google Powered Captcha or reCaptcha, and the irony that a bot has been designed to verify our humanity isn&#8217;t lost on us!<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Whether it&#8217;s attacks on Contact forms, or WooCommerce Checkout Pages, Captcha&#8217;s and reCaptcha&#8217;s are an established way to secure your forms from Bot traffic at zero cost (1,000,000 entries a month before you need a paid option).<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce doesn&#8217;t come with Captcha or reCaptcha built in. Some of the reasoning behind this may be because actually the integration of the reCaptcha can be taken of by Themes, plugins and page builders.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">For example the Divi Theme (our recommendation) Contact form module has the built in ability to enter keys for a reCaptcha.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">This still leaves a gap on the Checkout Form, but this gap we believe is likely to be filled by the roll out of the customisable cart and checkout page designs using the Gutenberg builder. This is currently available for testing as part of the WooCommerce Blocks Extension.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">So right now, you&#8217;re left with a few options for reCaptcha on WooCommerce.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">The paid option at $29 per year from the WooCommerce Extensions Marketplace is likely to give you the least hassle in terms of plugin clashes and poorly configured integrations.<\/p>\n\n\n\n<figure class=\"wp-block-embed-wordpress wp-block-embed is-type-wp-embed is-provider-woocommerce\"><div class=\"wp-block-embed__wrapper\">\n<blockquote class=\"wp-embedded-content\" data-secret=\"VoSZxuoqac\"><a href=\"https:\/\/woocommerce.com\/products\/recaptcha-for-woocommerce\/\" target=\"_blank\" rel=\"noopener\">reCaptcha for WooCommerce<\/a><\/blockquote><iframe loading=\"lazy\" class=\"wp-embedded-content\" sandbox=\"allow-scripts\" security=\"restricted\" style=\"position: absolute; clip: rect(1px, 1px, 1px, 1px);\" title=\"&#8220;reCaptcha for WooCommerce&#8221; &#8212; WooCommerce\" src=\"https:\/\/woocommerce.com\/products\/recaptcha-for-woocommerce\/embed\/#?secret=6D8XE9A7c9#?secret=VoSZxuoqac\" data-secret=\"VoSZxuoqac\" width=\"600\" height=\"338\" frameborder=\"0\" marginwidth=\"0\" marginheight=\"0\" scrolling=\"no\"><\/iframe>\n<\/div><\/figure>\n\n\n\n<p class=\"wp-block-paragraph\">There are a bunch of other options, but they&#8217;re more generally developed for WordPress as opposed to specifically to meet the needs of WooCommerce which are slightly nuanced.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">There are tonnes of plugins in the WordPress plugin repository with the tag &#8220;recaptcha&#8221; &#8211; <a href=\"https:\/\/en-gb.wordpress.org\/plugins\/tags\/recaptcha\/\" target=\"_blank\" rel=\"noreferrer noopener\">see them here<\/a>.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Notable captcha and reCaptcha plugins for WooCommerce that also operate a Freemium model:<\/p>\n\n\n\n<ul class=\"wp-block-list\"><li><a href=\"https:\/\/wordpress.org\/plugins\/google-captcha\/\" target=\"_blank\" rel=\"noreferrer noopener\">reCaptcha by BestWebSoft<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/plugins\/advanced-nocaptcha-recaptcha\/\" target=\"_blank\" rel=\"noreferrer noopener\">Advanced noCaptcha &amp; invisible Captcha<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/plugins\/login-recaptcha\/\" target=\"_blank\" rel=\"noreferrer noopener\">Login No Captcha reCAPTCHA<\/a><\/li><li><a href=\"https:\/\/wordpress.org\/plugins\/no-captcha-recaptcha-for-woocommerce\/\" target=\"_blank\" rel=\"noreferrer noopener\">No CAPTCHA reCAPTCHA for WooCommerce<\/a><\/li><\/ul>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Security_Plugins_%E2%80%93_Essential_Functionality\"><\/span>WooCommerce Security Plugins &#8211; Essential Functionality<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<div style=\"height:30px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"Web_Application_Firewalls_hosted_on_your_WordPress_installation\"><\/span>Web Application Firewalls (hosted on your WordPress installation)<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">We can safely put Web Application Firewalls on this list &#8211; even if they&#8217;re hosted on your WordPress website as a last line of defence, I&#8217;m sure you&#8217;d rather not leave the door wide open.<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h3 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"captcha_reCaptcha_Form_Checkout_Protection_for_WooCommerce\"><\/span>captcha &amp; reCaptcha Form &amp; Checkout Protection for WooCommerce<span class=\"ez-toc-section-end\"><\/span><\/h3>\n\n\n\n<p class=\"wp-block-paragraph\">This isn&#8217;t something that comes as part of the typical security plugin feature set, but still forms a part of your battle against the bots. We therefore list this one out as an essential part of the WooCommerce security checklist that you&#8217;ll probably need a dedicated plugin to implement.<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Security_Plugins_Reviewed_Compared\"><\/span>WooCommerce Security Plugins Reviewed &amp; Compared<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Coming Soon<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h2 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"WooCommerce_Backup_Plugins_Reviewed_Compared\"><\/span>WooCommerce Backup Plugins Reviewed &amp; Compared<span class=\"ez-toc-section-end\"><\/span><\/h2>\n\n\n\n<p class=\"wp-block-paragraph\">Coming Soon<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>\n\n\n\n<h4 class=\"wp-block-heading\"><span class=\"ez-toc-section\" id=\"You_may_have_searched_for\"><\/span>You may have searched for:<span class=\"ez-toc-section-end\"><\/span><\/h4>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce vulnerability scanner<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security updates<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security services<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security service<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security scan<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security plugins<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security issues<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security expert<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce security checklist<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce secure login<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">WooCommerce secret key<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">best WooCommerce security plugins<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">best WooCommerce security plugin<\/p>\n\n\n\n<div style=\"height:100px\" aria-hidden=\"true\" class=\"wp-block-spacer\"><\/div>","protected":false},"excerpt":{"rendered":"<p>This WooCommerce Security Guide for Store Owners NOT Tech Geeks is a Work In Progress &#8211; and probably always will be to a certain degree. Some topics are age old classics, meanwhile some WooCommerce and WordPress security topics and very transient. This Security Guide for WooCommerce is therefore worth bookmarking for future as we&#8217;ll update&hellip; <a class=\"more-link\" href=\"https:\/\/www.futurestatemedia.com\/en\/woocommerce-security-checklist-plugins-hosting\/\">Continue reading <span class=\"screen-reader-text\">WooCommerce Security Issues, Checklist, Plugins &#038; Hosting<\/span><\/a><\/p>","protected":false},"author":3,"featured_media":0,"comment_status":"closed","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"_et_pb_use_builder":"off","_et_pb_old_content":"","_et_gb_content_width":"","footnotes":""},"categories":[30],"tags":[],"class_list":["post-3150","post","type-post","status-publish","format-standard","hentry","category-ecommerce-stores","entry"],"_links":{"self":[{"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/posts\/3150","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/users\/3"}],"replies":[{"embeddable":true,"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/comments?post=3150"}],"version-history":[{"count":0,"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/posts\/3150\/revisions"}],"wp:attachment":[{"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/media?parent=3150"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/categories?post=3150"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.futurestatemedia.com\/en\/wp-json\/wp\/v2\/tags?post=3150"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}