WooCommerce Order Review Flags

WooCommerce Order Review Flags is a lightweight admin assistant plugin built for WooCommerce store owners to quickly spot suspicious orders that need manual inspection. The tool automatically calculates risk scores for every new order based on native store data and labels orders with color-coded risk badges (Low / Medium / High).

This plugin never blocks checkout, changes order statuses or interferes with payment gateways. All risk scoring runs locally on your server with zero third-party APIs and zero customer data sent to external servers, fully protecting your store data privacy.

You get full control over 7 built-in adjustable scoring rules, advanced order filtering, one-click CSV export tools, bulk data management, and complete compatibility with WooCommerce HPOS and traditional legacy order tables. Customize every risk threshold, rule score, and export field to match your store’s unique order review workflow.

Features

7 fully configurable order risk scoring rules with editable score values and toggle switches3-tier risk rating system with yellow/orange/red color badges and hover score tooltips on the order list pageDedicated Review Summary meta box on single order edit pages to view full risk breakdownAdvanced order filters: risk level, review status, triggered scoring rule, date range and WooCommerce order statusMultiple CSV export modes: filtered one-click export, bulk selected export, full store order exportCustomizable CSV export fields with UTF-8 BOM encoding and CSV injection protectionBulk admin tools: batch clear review data, batch export selected ordersMaintenance utilities: mass recalculate scores for all historical orders, one-click full review data cleanupFull WooCommerce HPOS (High-Performance Order Storage) & legacy order table supportNo frontend scripts or styles loaded; zero impact on customer shopping page performanceComplete security protection: WordPress nonce verification, capability checks, input sanitizationNo custom database tables; all data stored as standard WooCommerce order metaCompatible with Stripe, PayPal and all other WooCommerce payment gateways

Requirements

Minimum System Requirements

1. WordPress: 6.0 or higher
2. WooCommerce: 7.0 ~ 9.x
3. PHP Version: 7.4 up to 8.3
4. Server: Standard WordPress compatible hosting (no external API/third-party service required)
5. Storage: Minimal disk space, no extra database tables needed

Instructions

Installation Guide

Method 1: WordPress Upload Install

1. Download the plugin ZIP package after purchase.
2. Log into your WordPress dashboard, navigate to Plugins → Add New → Upload Plugin.
3. Select the downloaded ZIP file and click Install Now.
4. Activate WooCommerce Order Review Flags once installation finishes.

Method 2: Manual FTP Install

1. Extract the ZIP file locally on your computer.
2. Upload the wc-order-review-flags folder to /wp-content/plugins/ via FTP client.
3. Go to WordPress Plugins page and activate the plugin.

Basic Setup & Usage

1. Navigate to WooCommerce → Settings → Order Review Flags, four setting tabs are available: General, Rules, Export, Tools.
2. General Tab: Set risk score thresholds, high order amount limits, IP repeat limits and duplicate order detection periods. Toggle Delete Data on Uninstall to auto-clean data during plugin removal.
3. Rules Tab: Enable or disable each of the 7 risk rules and adjust individual score weights for your store’s demands.
4. Export Tab: Tick customer/order fields you want to include inside CSV exported files.
5. Tools Tab: Recalculate risk scores for all past orders, export full order data or erase all stored review data permanently.
6. New orders will auto-generate risk scores after activation. Check the Review column on WooCommerce Orders page to view color risk badges.
7. Click any single order to open the Review Summary sidebar, recalculate scores or clear review markers for that specific order.
8. Use the top filter bar to isolate high-risk orders and export filtered order lists as CSV files in one click.

Uninstall Note

Enable Delete Data on Uninstall in General settings before deactivating and deleting the plugin if you want to fully remove all risk score records and plugin configurations from your database.