a24italia

A24 Geo Checkout Blocker lets store administrators restrict the WooCommerce checkout page by visitor country. It is a country-based WooCommerce checkout restriction plugin for WordPress stores that need geolocation checkout control, country blocking, regional checkout rules, MaxMind GeoIP2 support, or Cloudflare geolocation support.
Features:
<ul>
<li>Choose MaxMind GeoIP2 web service or Cloudflare geolocation header.</li>
<li>Configure MaxMind Account ID and License Key only when MaxMind is selected.</li>
<li>Test whether Cloudflare headers are present or whether MaxMind credentials can connect successfully, including the IP address used for the test.</li>
<li>Select individual countries or the European Union country group.</li>
<li>Choose whether selected countries are blocked or whether only selected countries are allowed.</li>
<li>Evaluates only non-admin visitors on checkout when the cart is not empty.</li>
<li>Caches the visitor IP address and detected country in a WordPress transient for 24 hours.</li>
<li>Adds suggested privacy policy text for site administrators.</li>
</ul>
When MaxMind is selected and credentials are missing, the plugin does nothing. When Cloudflare is selected and the CF-IPCountry header is missing, the plugin does nothing.
Developer: a24italia 
Plugin page: https://www.autotech24.it/a24-geo-checkout-blocker/ 
Website: https://www.autotech24.it/ 
Repository: https://github.com/a24italia/a24-geo-checkout-blocker/ 
Support: https://github.com/a24italia/a24-geo-checkout-blocker/issues 
Email: info@autotech24.it
<h3>Privacy</h3>
This plugin may process a visitor IP address to determine checkout eligibility. With MaxMind selected, the visitor IP address is sent to MaxMind GeoIP2 web services. With Cloudflare selected, the plugin reads the CF-IPCountry request header. The visitor IP address and detected country are stored in a WordPress transient for 24 hours.
<h3>External services</h3>
This plugin can use external geolocation services depending on the provider selected by the site administrator.
<h4>MaxMind GeoIP2 Web Services</h4>
When MaxMind is selected as the geolocation provider, this plugin connects to the MaxMind GeoIP2 Country web service to determine the country associated with a visitor IP address. This is required to decide whether the visitor is allowed to access the WooCommerce checkout according to the configured country rules.
The plugin sends the visitor IP address to MaxMind when a non-admin visitor reaches the WooCommerce checkout with a non-empty cart and no valid cached country result exists. The plugin also sends the current admin request IP address to MaxMind when an administrator uses the provider test button in the plugin settings. The request uses the MaxMind Account ID and License Key configured by the site administrator.
This service is provided by MaxMind, Inc.
Terms: https://www.maxmind.com/en/end-user-license-agreement 
Privacy policy: https://www.maxmind.com/en/privacy-policy
<h4>Cloudflare</h4>
When Cloudflare is selected as the geolocation provider, this plugin does not call a Cloudflare API. It reads the CF-IPCountry HTTP request header that Cloudflare may add to requests passing through Cloudflare. This header contains a country code used to decide whether the visitor is allowed to access the WooCommerce checkout according to the configured country rules.
The plugin reads the CF-IPCountry header when a non-admin visitor reaches the WooCommerce checkout with a non-empty cart and no valid cached country result exists. The plugin also checks the current admin request for this header when an administrator uses the provider test button in the plugin settings.
This service is provided by Cloudflare, Inc.
Terms: https://www.cloudflare.com/terms/ 
Privacy policy: https://www.cloudflare.com/privacypolicy/

A24 Geo Checkout Blocker

Blocks or allows WooCommerce checkout access by visitor country using MaxMind GeoIP2 or Cloudflare geolocation headers.

topsyde

CountryLock provides a simple, lightweight way to allow or block countries from accessing your WordPress site.
It’s designed to be “set it and forget it” with no upsells, ads, or complex configurations.
<h3>✨ Key Features</h3>
<ul>
<li>Master Toggle: Enable or disable the firewall with a single click.</li>
<li>Allowed Countries List: Specify which two-letter country codes (e.g., <code>US</code>, <code>CA</code>) are allowed. Everyone else is blocked.</li>
<li>Admin Bypass: Logged-in administrators can always bypass the block (toggleable).</li>
<li>IP Allowlist: A simple list of IPs or CIDR ranges (like <code>123.45.67.89</code> or <code>10.0.0.0/8</code>) that are always allowed.</li>
<li>Block Logging: See which countries and IPs are being blocked (toggleable).</li>
<li>Zero-Lookup Detection: Automatically uses Cloudflare (<code>HTTP_CF_IPCOUNTRY</code>) and other common server-level GEO headers for instant decisions with zero performance impact.</li>
<li>Remote Lookup: As a fallback, it can query an external service (<code>ipapi.co</code>) if no headers are found.</li>
</ul>
<h3>External Services</h3>
This plugin uses one external service as a fallback to determine a visitor’s country if no local GEO headers (like those from Cloudflare or a server-level GeoIP module) are present.
<ul>
<li>Service: <code>ipapi.co</code></li>
<li>What it’s used for: To look up the country of origin for a visitor’s IP address.</li>
<li>Data Sent: The visitor’s IP address is sent to the service. This happens only if the “Use remote lookup if no geo headers” setting is enabled AND no local GeoIP headers are detected.</li>
<li>Service Policies:
<ul>
<li><a href="https://ipapi.co/terms/" rel="nofollow ugc">Terms of Service</a></li>
<li><a href="https://ipapi.co/privacy/" rel="nofollow ugc">Privacy Policy</a></li>
</ul>
</li>
</ul>

CountryLock

Block/allow countries with one toggle. Lightweight, no upsells. Includes admin bypass, IP allowlist, and block stats.

A24 Geo Checkout Blocker vs CountryLock