FraudLabs Pro for WooCommerce

FraudLabs Pro for WooCommerce has 2 disclosed vulnerabilities in the WordSec catalog, all reported in 2025; all 2 are fixed as of September 2026. Their average CVSS score is 5.7, and the most serious one scores 6.1 out of 10. 2025 was the busiest year with 2 disclosures.

The most common weakness is Cross-Site Request Forgery (CSRF), behind 1 of the records (50%). Other recurring categories include Missing Authorization.

Every one of the 2 issues recorded for FraudLabs Pro for WooCommerce has a vendor fix available, so running the current release closes all known holes.

2 independent researchers contributed these findings, one record each. FraudLabs Pro for WooCommerce is installed on roughly 1,000 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.1.

Strategic Overview

Avg CVSSMedium
5.7/ 10
Patch Coverage100%
Open

0

Fixed

2

Get automatic notifications for all FraudLabs Pro for WooCommerce vulnerabilities before they are exploited.

Highest severity on recordCVSS 6.1CVE-2025-32659

FraudLabs Pro for WooCommerce <= 2.22.8 - Cross-Site Request Forgery to Stored Cross-Site Scripting

Read the full analysis

Vulnerability Records

2 records
FraudLabs Pro for WooCommerce banner
Latestv2.25.3

FraudLabs Pro for WooCommerce

fraudlabspro

Author

fraudlabspro

4.2(18)
84/100
Last Updated
2026-09-02 (11d ago)
Active Installs
1,000+
Downloads
94,796
Requires WP
4.6+
Requires PHP
0+
Tested up to
WP 7.1
Created
2014-07-20 (12y ago)
Requires Plugins
woocommerce

The Fraud Prevention Plugin is designed to help merchants detect and prevent fraud orders. It performs a comprehensive check on all elements (data points) within an order to accurately detect fraudulent patterns in a fraction of a second. The check includes geolocation, proxy, email, shipping address, credit card, transaction velocity, and more. The plugin also checks against our real-time blacklist data, contributed by our global merchant network, to gauge the fraud risk associated with the order. This plugin works well with all types of the payment method, and it’s absolutely free for 500 orders validation per month or sales less than 25K USD per month. Why FraudLabs Pro? Flexibility We offer you a flexible solution to identify a fraud order. You can use our FraudLabs Pro score to determine a fraud order or customize your own validation rules to target a specific case, or a combination of both. Free We are not offering you a trial version, but a free version to start protecting your online business. It’s absolutely free for 500 validation per month or sales less than 25K USD per month. There is no upfront credit card information needed, commitment, hidden cost and whatsoever! Easy to setup The setup is simple and only takes a few minutes. You just need to install the free FraudLabs Pro plugin, enter the API key and configure the settings. Trustworthy We have been in the fraud prevention industry for more than 10 years. Thousands of our clients are currently using our FraudLabs Pro solution. This WooCommerce plugin is one of 22 ready plugins for major shopping cart platforms. Please check out our website https://www.fraudlabspro.com for details. Key Features Below are the key features of FraudLabs Pro plugin for WooCommerce: Fraud analysis and scoring IP address geolocation validation Anonymous proxy validation Credit card validation Email address validation Transaction velocity validation Device transaction validation Blacklist validation Export controlled country validation Malware exploit validation Custom validation rules FraudLabs Pro Merchant Network Email notification of fraud orders Mobile App (Android & iOS) notification of fraud orders Allow merchant to validate the order before or after checkout process Support SMS Verification to further validate the fraudulent order Start protecting your business now for free: Sign up for a Free Advanced Features (Paid Plans) Secure your business with our advanced features such as: Comprehensive fraud reports Automated email whitelist Advanced blacklist validation IP and Ship Location Anomaly detection Hourly Sales Anomaly Detection IP usage type validation and more.. Strengthen your store protection with advanced features: Unlock advanced features. How to Get Started 1: Install the Plugin Install the FraudLabs Pro Fraud Prevention plugin from the WordPress admin area and activate it. 2: Sign Up for a Free Account Create a free account at https://www.fraudlabspro.com/sign-up to get your API key. 3: Configure the Plugin Go to the FraudLabs Pro plugin tab, paste in your API key and review other settings. 4: Start Screening Orders Automatically Once set up, all new orders will be automatically screened and scored by our fraud detection engine. Resources For detailed guides and tutorials, please visit our resources below: * Knowledge Base Articles * Tutorial Videos on YouTube

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C