HDWebmobile Custom Order Numbers
Give orders a custom-formatted display number — the real order ID always determines access, never the display number.
Overview
HDWebmobile Custom Order Numbers changes the order number WooCommerce shows everywhere — the admin order list and screen, order emails, and My Account — to your own format: a prefix like “ORD-”, a suffix, a minimum digit count with zero-padding, and a starting-number offset so your first order doesn’t have to display as “#1”.
“Custom Order Numbers for WooCommerce” (versions up to and including 1.11.0) shipped CVE-2025-66071 (CWE-862 Missing Authorization): order-numbering functionality that should have been restricted to administrators could be manipulated or accessed by users who shouldn’t have been able to. This plugin is built so that class of bug has nowhere to happen: the format settings are saved entirely through the WordPress Settings API, which enforces the manage_options capability and a verified nonce — this plugin adds no custom save handler of its own to get wrong. The custom number is a display label, nothing more — generated purely from the order’s own real, immutable id via WooCommerce’s own woocommerce_order_number filter, so there’s no separate counter that could drift or collide. This plugin also adds no new search or lookup surface; order search and access continue entirely through WooCommerce’s own, already-capability-gated admin screens.
Key Features
- Prefix, suffix, zero-padding, and a starting-number offset
- Applies everywhere WooCommerce shows an order number: admin, emails, My Account
- A live preview of the format while you configure it
- Zero risk of a custom number ever going out of sync with the real order — it’s derived, not stored
Limitations
Please read before installing:
- One global format for the whole store — no per-year or per-status numbering schemes
- No “search orders by custom number” admin feature in this version
- Changing the format changes how existing orders display immediately; it does not rewrite anything stored
Quick Setup
- Upload the plugin files to the /wp-content/plugins/hdwebmobile-custom-order-numbers directory, or install through the Plugins screen directly.
- Activate the plugin through the ‘Plugins’ screen in WordPress. WooCommerce must already be installed and active.
- Go to WooCommerce > Settings > Custom Order Numbers and set your prefix, suffix, and padding.
Latest Version
Current stable version in readme: 1.0.0 (Initial release: prefix/suffix/padding order-number formatting, derived from the real order id everywhere WooCommerce displays it.)
See our other WordPress plugins for more WooCommerce and site-utility tools.
