WP Beacon

Orders Tracking for WooCommerce

woo-orders-tracking · by villatheme · wordpress.org ↗ · SVN ↗
Acquired by VillaTheme. New committers from that team's naming convention are expected and will not fire takeover events. source ↗
Active installs
10k+
Current version
1.3.0
Added
2019-05-07
Last updated
2026-06-26 (6d ago)
First seen by beacon
2mo ago
Total downloads
397,463

Statistics

2024-06-17 → 2026-07-01 · 745 days
Downloads today
242
7-day total 4,420
Week over week
▲ +1,227%
vs prior 7 days
30-day trend
flat
▲ +216% MoM
Abandonment
●○○○○
install base on one version
Downloads/day Linear trend
4k3k2k1k02024-062024-102025-022025-062025-102026-022026-07
3k2k1k62902026-042026-042026-052026-052026-062026-06
3k2k1k62902026-062026-062026-062026-062026-062026-06

Active versions

1.21.3
1.2 · 82.8%1.3 · 15.1%1.1 · 2.1%

Ratings

5★
48
4★
3
3★
0
2★
3
1★
4

Support: 0/2 resolved

Alerts (0)

No open alerts.

Show 8 resolved alerts
Critical code_pattern Resolved · fp_courier_tracking_ips_villatheme 2026-07-02 12:39:47 (6h ago)
Slugwoo-orders-tracking
Patternhardcoded_ip_url
Kindbuiltin
Version1.3.0
Hit count1
First hit
File
includes/class-vi-woo-orders-tracking-trackingmore.php
Line
331
Snippet
return vi_wot_json_decode( '[{"courier_name":"DHL Express","courier_code":"dhl","courier_type":"express","courier_phone":null,"country_code":"DE","courier_url":"http://www.dhl.com/en/express/tracki
Explanationplugin source hardcodes a raw IPv4 URL (e.g. `https://94.156.79.8/...`) — legitimate plugins use DNS hostnames because IPs change. Hardcoded IPs in plugin code are almost always either dev leftovers or attacker C2 infrastructure. The June 2024 social-warfare keylogger (audit #14) used `https://94.156.79.8/sc-top.js` for the JS payload host, `/AddSites` for victim registration, `/CMSUsers` for filesystem-recon exfil. Operator infrastructure on raw IPs avoids domain registration / RDAP detection paths. Post-filtered to skip RFC1918/loopback/link-local ranges and `vendor/`/`tests/` paths.
View raw JSON
{
    "slug": "woo-orders-tracking",
    "pattern": "hardcoded_ip_url",
    "kind": "builtin",
    "version": "1.3.0",
    "hit_count": 1,
    "first_hit": {
        "file": "includes/class-vi-woo-orders-tracking-trackingmore.php",
        "line": 331,
        "snippet": "return vi_wot_json_decode( '[{\"courier_name\":\"DHL Express\",\"courier_code\":\"dhl\",\"courier_type\":\"express\",\"courier_phone\":null,\"country_code\":\"DE\",\"courier_url\":\"http://www.dhl.com/en/express/tracki"
    },
    "explanation": "plugin source hardcodes a raw IPv4 URL (e.g. `https://94.156.79.8/...`) \u2014 legitimate plugins use DNS hostnames because IPs change. Hardcoded IPs in plugin code are almost always either dev leftovers or attacker C2 infrastructure. The June 2024 social-warfare keylogger (audit #14) used `https://94.156.79.8/sc-top.js` for the JS payload host, `/AddSites` for victim registration, `/CMSUsers` for filesystem-recon exfil. Operator infrastructure on raw IPs avoids domain registration / RDAP detection paths. Post-filtered to skip RFC1918/loopback/link-local ranges and `vendor/`/`tests/` paths."
}
Critical code_scan_delta Resolved · fp_courier_tracking_ips_villatheme 2026-07-02 03:45:39 (15h ago)
Slugwoo-orders-tracking
Previous version1.2.17
Current version1.3.0
New findings
PatternKindFileLineSnippetConfidence
hardcoded_ip_urlbuiltinincludes/class-vi-woo-orders-tracking-trackingmore.php331return vi_wot_json_decode( '[{"courier_name":"DHL Express","courier_code":"dhl","courier_type":"express","courier_phone":null,"country_code":"DE","courier_url":"http://www.dhl.com/en/express/trackihigh
New finding count1
View raw JSON
{
    "slug": "woo-orders-tracking",
    "previous_version": "1.2.17",
    "current_version": "1.3.0",
    "new_findings": [
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "includes/class-vi-woo-orders-tracking-trackingmore.php",
            "line": 331,
            "snippet": "return vi_wot_json_decode( '[{\"courier_name\":\"DHL Express\",\"courier_code\":\"dhl\",\"courier_type\":\"express\",\"courier_phone\":null,\"country_code\":\"DE\",\"courier_url\":\"http://www.dhl.com/en/express/tracki",
            "confidence": "high"
        }
    ],
    "new_finding_count": 1
}
Critical code_scan_match Resolved · code_scan_fp_class_vendored_lib_data_table 2026-05-05 13:04:29 (1mo ago)
Slugwoo-orders-tracking
Finding count1
Findings
PatternKindFileLineSnippetConfidence
hardcoded_ip_urlbuiltinincludes/class-vi-woo-orders-tracking-trackingmore.php331return vi_wot_json_decode( '[{"courier_name":"DHL Express","courier_code":"dhl","courier_type":"express","courier_phone":null,"country_code":"DE","courier_url":"http://www.dhl.com/en/express/trackihigh
Resolved sha6949683cda5f7533f3b2e3487823b6a1b488dd61
View raw JSON
{
    "slug": "woo-orders-tracking",
    "finding_count": 1,
    "findings": [
        {
            "pattern": "hardcoded_ip_url",
            "kind": "builtin",
            "file": "includes/class-vi-woo-orders-tracking-trackingmore.php",
            "line": 331,
            "snippet": "return vi_wot_json_decode( '[{\"courier_name\":\"DHL Express\",\"courier_code\":\"dhl\",\"courier_type\":\"express\",\"courier_phone\":null,\"country_code\":\"DE\",\"courier_url\":\"http://www.dhl.com/en/express/tracki",
            "confidence": "high"
        }
    ],
    "resolved_sha": "6949683cda5f7533f3b2e3487823b6a1b488dd61"
}
High bulk_committer_takeover Resolved · no_longer_matches 2026-05-02 11:36:19 (2mo ago)
Committerleminhhung
Member since2025-04-09
Plugins joined6
Spread days50
Earliest join2025-12-05 08:09:30
Latest join2026-01-24 08:24:12
Combined installs17,400
Sample plugins
SlugActive installsFirst commit at
woo-orders-tracking10,0002026-01-20 02:40:43
import-shopify-to-woocommerce3,0002026-01-24 07:50:45
product-size-chart-for-woo3,0002026-01-13 03:47:30
w2s-migrate-woo-to-shopify1,0002026-01-24 08:24:12
woo-advanced-product-information2002025-12-05 08:09:30
woo-customer-coupons2002025-12-24 02:11:08
View raw JSON
{
    "committer": "leminhhung",
    "member_since": "2025-04-09",
    "plugins_joined": 6,
    "spread_days": 50,
    "earliest_join": "2025-12-05 08:09:30",
    "latest_join": "2026-01-24 08:24:12",
    "combined_installs": 17400,
    "sample_plugins": [
        {
            "slug": "woo-orders-tracking",
            "active_installs": 10000,
            "first_commit_at": "2026-01-20 02:40:43"
        },
        {
            "slug": "import-shopify-to-woocommerce",
            "active_installs": 3000,
            "first_commit_at": "2026-01-24 07:50:45"
        },
        {
            "slug": "product-size-chart-for-woo",
            "active_installs": 3000,
            "first_commit_at": "2026-01-13 03:47:30"
        },
        {
            "slug": "w2s-migrate-woo-to-shopify",
            "active_installs": 1000,
            "first_commit_at": "2026-01-24 08:24:12"
        },
        {
            "slug": "woo-advanced-product-information",
            "active_installs": 200,
            "first_commit_at": "2025-12-05 08:09:30"
        },
        {
            "slug": "woo-customer-coupons",
            "active_installs": 200,
            "first_commit_at": "2025-12-24 02:11:08"
        }
    ]
}
Critical bulk_committer_takeover Resolved · no_longer_matches 2026-05-02 11:24:35 (2mo ago)
Committerlodai
Member since2023-12-30
Plugins joined13
Spread days364
Earliest join2023-12-30 02:46:59
Latest join2024-12-28 04:06:10
Combined installs42,400
Sample plugins
SlugActive installsFirst commit at
woo-orders-tracking10,0002024-09-28 01:59:38
woo-cart-all-in-one6,0002024-10-28 02:00:25
woo-notification6,0002023-12-30 02:46:59
clear-autoptimize-cache-automatically4,0002024-12-28 03:20:00
woo-abandoned-cart-recovery4,0002024-10-22 08:36:01
import-shopify-to-woocommerce3,0002024-11-25 10:30:32
product-size-chart-for-woo3,0002024-10-01 07:01:54
product-pre-orders-for-woo2,0002024-04-13 03:03:46
woo-free-shipping-bar2,0002024-01-29 06:40:00
w2s-migrate-woo-to-shopify1,0002024-12-24 04:40:58
View raw JSON
{
    "committer": "lodai",
    "member_since": "2023-12-30",
    "plugins_joined": 13,
    "spread_days": 364,
    "earliest_join": "2023-12-30 02:46:59",
    "latest_join": "2024-12-28 04:06:10",
    "combined_installs": 42400,
    "sample_plugins": [
        {
            "slug": "woo-orders-tracking",
            "active_installs": 10000,
            "first_commit_at": "2024-09-28 01:59:38"
        },
        {
            "slug": "woo-cart-all-in-one",
            "active_installs": 6000,
            "first_commit_at": "2024-10-28 02:00:25"
        },
        {
            "slug": "woo-notification",
            "active_installs": 6000,
            "first_commit_at": "2023-12-30 02:46:59"
        },
        {
            "slug": "clear-autoptimize-cache-automatically",
            "active_installs": 4000,
            "first_commit_at": "2024-12-28 03:20:00"
        },
        {
            "slug": "woo-abandoned-cart-recovery",
            "active_installs": 4000,
            "first_commit_at": "2024-10-22 08:36:01"
        },
        {
            "slug": "import-shopify-to-woocommerce",
            "active_installs": 3000,
            "first_commit_at": "2024-11-25 10:30:32"
        },
        {
            "slug": "product-size-chart-for-woo",
            "active_installs": 3000,
            "first_commit_at": "2024-10-01 07:01:54"
        },
        {
            "slug": "product-pre-orders-for-woo",
            "active_installs": 2000,
            "first_commit_at": "2024-04-13 03:03:46"
        },
        {
            "slug": "woo-free-shipping-bar",
            "active_installs": 2000,
            "first_commit_at": "2024-01-29 06:40:00"
        },
        {
            "slug": "w2s-migrate-woo-to-shopify",
            "active_installs": 1000,
            "first_commit_at": "2024-12-24 04:40:58"
        }
    ]
}
Medium bulk_committer_takeover Resolved · no_longer_matches 2026-05-02 11:24:35 (2mo ago)
Committerhaidev
Member since2025-07-31
Plugins joined7
Spread days113
Earliest join2025-07-31 09:40:51
Latest join2025-11-22 07:01:19
Combined installs23,900
Sample plugins
SlugActive installsFirst commit at
woo-orders-tracking10,0002025-11-19 08:37:34
woo-notification6,0002025-10-18 06:55:59
woo-thank-you-page-customizer4,0002025-11-22 07:01:19
product-pre-orders-for-woo2,0002025-07-31 09:40:51
bopo-woo-product-bundle-builder1,0002025-11-08 10:11:28
pofily-woo-product-filters7002025-09-16 09:38:23
chinads-dropshipping-taobao-woocommerce2002025-11-15 09:52:49
View raw JSON
{
    "committer": "haidev",
    "member_since": "2025-07-31",
    "plugins_joined": 7,
    "spread_days": 113,
    "earliest_join": "2025-07-31 09:40:51",
    "latest_join": "2025-11-22 07:01:19",
    "combined_installs": 23900,
    "sample_plugins": [
        {
            "slug": "woo-orders-tracking",
            "active_installs": 10000,
            "first_commit_at": "2025-11-19 08:37:34"
        },
        {
            "slug": "woo-notification",
            "active_installs": 6000,
            "first_commit_at": "2025-10-18 06:55:59"
        },
        {
            "slug": "woo-thank-you-page-customizer",
            "active_installs": 4000,
            "first_commit_at": "2025-11-22 07:01:19"
        },
        {
            "slug": "product-pre-orders-for-woo",
            "active_installs": 2000,
            "first_commit_at": "2025-07-31 09:40:51"
        },
        {
            "slug": "bopo-woo-product-bundle-builder",
            "active_installs": 1000,
            "first_commit_at": "2025-11-08 10:11:28"
        },
        {
            "slug": "pofily-woo-product-filters",
            "active_installs": 700,
            "first_commit_at": "2025-09-16 09:38:23"
        },
        {
            "slug": "chinads-dropshipping-taobao-woocommerce",
            "active_installs": 200,
            "first_commit_at": "2025-11-15 09:52:49"
        }
    ]
}
Medium bulk_committer_takeover Resolved · no_longer_matches 2026-04-30 17:44:51 (2mo ago)
Committerhaidev
Member since2025-07-31
Plugins joined6
Spread days113
Earliest join2025-07-31 09:40:51
Latest join2025-11-22 07:01:19
Combined installs23,700
Sample plugins
SlugActive installsFirst commit at
woo-orders-tracking10,0002025-11-19 08:37:34
woo-notification6,0002025-10-18 06:55:59
woo-thank-you-page-customizer4,0002025-11-22 07:01:19
product-pre-orders-for-woo2,0002025-07-31 09:40:51
bopo-woo-product-bundle-builder1,0002025-11-08 10:11:28
pofily-woo-product-filters7002025-09-16 09:38:23
View raw JSON
{
    "committer": "haidev",
    "member_since": "2025-07-31",
    "plugins_joined": 6,
    "spread_days": 113,
    "earliest_join": "2025-07-31 09:40:51",
    "latest_join": "2025-11-22 07:01:19",
    "combined_installs": 23700,
    "sample_plugins": [
        {
            "slug": "woo-orders-tracking",
            "active_installs": 10000,
            "first_commit_at": "2025-11-19 08:37:34"
        },
        {
            "slug": "woo-notification",
            "active_installs": 6000,
            "first_commit_at": "2025-10-18 06:55:59"
        },
        {
            "slug": "woo-thank-you-page-customizer",
            "active_installs": 4000,
            "first_commit_at": "2025-11-22 07:01:19"
        },
        {
            "slug": "product-pre-orders-for-woo",
            "active_installs": 2000,
            "first_commit_at": "2025-07-31 09:40:51"
        },
        {
            "slug": "bopo-woo-product-bundle-builder",
            "active_installs": 1000,
            "first_commit_at": "2025-11-08 10:11:28"
        },
        {
            "slug": "pofily-woo-product-filters",
            "active_installs": 700,
            "first_commit_at": "2025-09-16 09:38:23"
        }
    ]
}
Critical bulk_committer_takeover Resolved · no_longer_matches 2026-04-29 13:04:23 (2mo ago)
Committerlodai
Member since—
Plugins joined11
Spread days364
Earliest join2023-12-30 02:46:59
Latest join2024-12-28 03:20:00
Combined installs42,000
Sample plugins
SlugActive installsFirst commit at
woo-orders-tracking10,0002024-09-28 01:59:38
woo-cart-all-in-one6,0002024-10-28 02:00:25
woo-notification6,0002023-12-30 02:46:59
clear-autoptimize-cache-automatically4,0002024-12-28 03:20:00
woo-abandoned-cart-recovery4,0002024-10-22 08:36:01
import-shopify-to-woocommerce3,0002024-11-25 10:30:32
product-size-chart-for-woo3,0002024-10-01 07:01:54
product-pre-orders-for-woo2,0002024-04-13 03:03:46
woo-free-shipping-bar2,0002024-01-29 06:40:00
w2s-migrate-woo-to-shopify1,0002024-12-24 04:40:58
View raw JSON
{
    "committer": "lodai",
    "member_since": null,
    "plugins_joined": 11,
    "spread_days": 364,
    "earliest_join": "2023-12-30 02:46:59",
    "latest_join": "2024-12-28 03:20:00",
    "combined_installs": 42000,
    "sample_plugins": [
        {
            "slug": "woo-orders-tracking",
            "active_installs": 10000,
            "first_commit_at": "2024-09-28 01:59:38"
        },
        {
            "slug": "woo-cart-all-in-one",
            "active_installs": 6000,
            "first_commit_at": "2024-10-28 02:00:25"
        },
        {
            "slug": "woo-notification",
            "active_installs": 6000,
            "first_commit_at": "2023-12-30 02:46:59"
        },
        {
            "slug": "clear-autoptimize-cache-automatically",
            "active_installs": 4000,
            "first_commit_at": "2024-12-28 03:20:00"
        },
        {
            "slug": "woo-abandoned-cart-recovery",
            "active_installs": 4000,
            "first_commit_at": "2024-10-22 08:36:01"
        },
        {
            "slug": "import-shopify-to-woocommerce",
            "active_installs": 3000,
            "first_commit_at": "2024-11-25 10:30:32"
        },
        {
            "slug": "product-size-chart-for-woo",
            "active_installs": 3000,
            "first_commit_at": "2024-10-01 07:01:54"
        },
        {
            "slug": "product-pre-orders-for-woo",
            "active_installs": 2000,
            "first_commit_at": "2024-04-13 03:03:46"
        },
        {
            "slug": "woo-free-shipping-bar",
            "active_installs": 2000,
            "first_commit_at": "2024-01-29 06:40:00"
        },
        {
            "slug": "w2s-migrate-woo-to-shopify",
            "active_installs": 1000,
            "first_commit_at": "2024-12-24 04:40:58"
        }
    ]
}

SVN committers (8)

Accounts with actual commit access to woo-orders-tracking on plugins.svn.wordpress.org, reconstructed from svn log. This is the list that matters for ownership changes — not the readme contributors.

Committer Member since Commits First commit Latest commit
kimvt1991 2017-11-21 36 2019-05-07 · r2082298 2022-11-17 · r2819417
mytrinh 2019-05-02 32 2019-09-19 · r2158882 2026-06-26 · r3587014
lodai 2023-12-30 10 2024-09-28 · r3159022 2025-04-18 · r3276673
Andy Ha 2015-10-27 5 2019-05-07 · r2082011 2024-05-03 · r3080899
Hai Tran 2025-07-31 2 2025-11-19 · r3398650 2025-11-19 · r3398652
vietmike 2021-10-23 2 2025-04-25 · r3281751 2025-07-24 · r3333487
leminhhung 2025-04-09 1 2026-01-20 · r3442906 2026-01-20 · r3442906
plugin-master 2007-03-09 1 2019-05-06 · r2081860 2019-05-06 · r2081860

Readme contributors (2)

Names the plugin's readme declares as contributors. A soft signal — anyone can be listed. The SVN access column is the ground-truth cross-reference: does this contributor actually commit code?

Contributor Member since SVN access Status
Andy Ha 2015-10-27 5 commits Active
VillaTheme 2019-05-13 — Active

Versions (5 most recent)

Version Released Download
1.2.0 2022-10-06 · 3y ago zip
1.1.16 2022-07-22 · 3y ago zip
1.1.14 2022-04-22 · 4y ago zip
1.1.10 2022-01-12 · 4y ago zip
1.1.8.7 2021-11-17 · 4y ago zip