---
title: "Meta for WooCommerce"
description: "Meta for WooCommerce in detail: pixel, Conversions API, Facebook and Instagram catalog, strengths, limits, consent, settings and past flaws."
language: "en"
locale: "en-US"
type: "plugin-sheet"
canonical: "https://www.wp-masquerade.com/features/camouflaged-plugins/meta-for-woocommerce/"
published: "2026-11-04T08:00:00+00:00"
modified: "2026-11-05T21:07:30+00:00"
translations:
  en-US: "https://www.wp-masquerade.com/features/camouflaged-plugins/meta-for-woocommerce/index.md"
  fr-FR: "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/meta-for-woocommerce/index.md"
  es-ES: "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/meta-for-woocommerce/index.md"
  de-DE: "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/meta-for-woocommerce/index.md"
  it-IT: "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/meta-for-woocommerce/index.md"
  pt-BR: "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/meta-for-woocommerce/index.md"
  nl-NL: "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/meta-for-woocommerce/index.md"
---

# Meta for WooCommerce

Meta for WooCommerce, Meta’s official plugin, connects a WooCommerce store to Facebook, Instagram and WhatsApp: pixel, Conversions API and product catalog. Our take on whether it fits your store, and the settings that limit the data sent to Meta.

## The essentials

- Best for WooCommerce stores that run Facebook and Instagram ads built from their product catalog.
- Main caveat: no checkout on Facebook or Instagram, and the pixel fires before any consent.
- Free, with no paid edition; your Meta ad campaigns are billed separately.

## What Meta for WooCommerce does on your store

Meta for WooCommerce, long known as Facebook for WooCommerce, is the official plugin Meta publishes to connect a WooCommerce store to Facebook, Instagram and WhatsApp. After you install it, the wizard under Marketing > Facebook has you pick or create your Meta assets: Business Manager account, Facebook Page, ad account, pixel and catalog. It also asks you to turn on two-factor authentication.

Once connected, the plugin works on three fronts. It adds the Meta pixel to your store pages and sends the same events from the server through the Conversions API, with no extra setup; a shared event ID keeps a purchase from being counted twice. It syncs your products to a Meta catalog, which feeds dynamic ads and the shop on your Page. And it can link a WhatsApp Business account to keep customers posted on their orders.

Every product gets a Facebook tab in the Product data box: sync mode, plus a Facebook-specific description, image, video and price, along with brand, condition or size. The plugin is free with no paid edition; Meta makes its money on the ads you buy.

![Diagram: Meta for WooCommerce (Facebook for WooCommerce) works on visitors and bots, database and files, external services. Public traces: signed HTML comments (hidden with Pro); folder name (hidden with Pro); tag IDs (hidden with Pro); files served by the vendor (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/facebook-woo/diagram-en.svg?v=ba516665)

## Which stores get real value from Meta for WooCommerce

The plugin makes sense when Facebook and Instagram are part of how you win customers:

- **Stores that buy Meta ads** and want to measure sales, retarget visitors and optimize campaigns for real purchases.
- **Catalogs with dozens of products** that would be a chore to re-enter by hand in Meta’s catalog manager.
- **Multilingual stores** running WPML, Polylang or TranslatePress, which can generate one product feed per language.
- **Merchants who talk to customers on WhatsApp** and want order updates sent automatically.

It’s the wrong pick if you don’t advertise on Meta: the pixel and sync then load scripts and send data for nothing in return. It’s also the wrong pick if you plan to take payments directly on Facebook or Instagram, since WooCommerce’s documentation says checkout on those platforms isn’t supported. If you only want the pixel, with finer control over events, a dedicated plugin such as [PixelYourSite](https://www.wp-masquerade.com/features/camouflaged-plugins/pixelyoursite/) is more flexible.

## Meta for WooCommerce strengths and limits

### Strengths

- **The official integration, free.** Published by Meta, it keeps pace with the ad tools without a license fee.
- **Pixel and Conversions API in one package.** Events go out from the browser and the server, deduplicated, with no manual setup.
- **Product-by-product control.** Each product can be synced, synced but hidden, or excluded, with its own Facebook price and image.
- **Per-language feeds.** With WPML, Polylang or TranslatePress, translated titles, descriptions and images go out in separate feeds.

### Limits

- **No direct selling on social.** Checkout on Facebook or Instagram isn’t supported, and neither is Instagram Shopping.
- **A pixel that fires by default.** Nothing waits for visitor consent: you have to hook your consent tool into the plugin’s signal-holding mechanism.
- **An interface that shifts with Meta.** Some tabs, such as Product sync, only appear when Meta turns them on for your account.
- **Uninstalling leaves things behind.** Removing the plugin doesn’t remove the WooCommerce app from Facebook or the system users created on Meta’s side.

## The Meta for WooCommerce settings we recommend

The plugin’s settings live under Marketing > Facebook (version 3.7.8). After each change, place a test order and check the events in Meta’s Events Manager.

| Setting | Recommended value | Why |
| --- | --- | --- |
| **Enable debug mode**  Marketing > Facebook > Configuration | Off (default), on only while troubleshooting | The plugin itself says to enable it only when you’re having problems. |
| **Enable meta diagnosis**  Marketing > Facebook > Configuration | Per your privacy policy; uncheck it if you don’t want to share your logs | On by default, it uploads the plugin’s event and error logs to Meta. |
| **Enable Offline Events**  Marketing > Facebook > Configuration | Off (default), unless you run a supported in-store POS | It only covers sales recorded by a supported point-of-sale plugin. |
| **Facebook Sync**  Products > Edit product > Product data > Facebook | “Do not sync” for private, wholesale-only or non-compliant products | Meta reviews uploaded products and removes those that break its Commerce Policies. |
| **Display prices in the shop**  WooCommerce > Settings > Tax | “Including tax” for stores that sell to consumers in tax-inclusive markets | The price synced to the catalog includes tax when the store displays prices including tax. |
| **Calculate tax based on**  WooCommerce > Settings > Tax | “Shop base address” if catalog prices come out wrong | The sync has no customer address, so tax based on the customer’s address can fail. |
| **JavaScript file combining**  Your caching plugin’s settings | Off if pixel events go missing | According to WooCommerce’s documentation, combining JS can stop some events from firing. |

- Make sure the pixel only fires after the visitor agrees: your consent tool should use the `facebook_signals_held` filter or the plugin’s signal-holding mechanism.
- Confirm two-factor authentication is on for your Business Manager account and your admins’ Facebook accounts.
- If you drop the plugin, also remove the WooCommerce app and its system users in your Meta business settings.
- Under Plugins, turn on auto-updates for Meta for WooCommerce.

## Meta for WooCommerce security: three flaws in a year

The plugin has few known vulnerabilities, but three were disclosed since fall 2025, all exploitable without an account:

- **October 2025, CVE-2025-64296**: a missing access check let anyone dismiss the plugin’s notices. Versions up to 3.5.7, fixed in 3.5.8 (CVSS 5.3).
- **May 2026, CVE-2026-49059**: an open redirect could send a visitor from one of your store’s URLs to a phishing site. Versions up to 3.7.0 (CVSS 4.7).
- **August 2026, CVE-2026-66707**: an unauthenticated [XSS flaw](https://www.wp-masquerade.com/glossary/xss/) affected versions up to 3.7.5, fixed in 3.7.6 (CVSS 7.1).

What to do: stay on the latest release, 3.7.6 at the very least, with auto-updates on, and track your plugins’ alerts as laid out in our vulnerability monitoring method. The foundation is still [WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce/), which needs updating too. WP Masquerade Pro strips the HTML comments and script names that give the plugin away, which makes it harder for bots to spot without fixing any flaw; the call to connect.facebook.net, which the pixel needs, stays visible.

## Meta for WooCommerce FAQ

**Does Meta for WooCommerce cost anything?**

No, the plugin is free and has no paid edition. You only pay for the ads you run on Facebook and Instagram.

**Do I need to set up the Conversions API separately?**

No. It’s built in and switches on when you connect. Pixel and server events carry the same ID, so Meta counts them only once.

**How do I turn off the pixel without uninstalling the plugin?**

WooCommerce’s documentation gives a filter: `add_filter( 'facebook_for_woocommerce_integration_pixel_enabled', '__return_false' );` disables the pixel and the Conversions API, while catalog sync keeps running.

**Can I sell directly on Instagram with this plugin?**

No. The catalog can be shared between Facebook and Instagram for ads, but checkout on those platforms and Instagram Shopping aren’t supported: customers finish their purchase on your store.

## Key facts

- Category: E-commerce
- Vendor: Meta Platforms
- Price: Free, with no paid edition; Facebook and Instagram ad campaigns are paid separately
- Active installations (wordpress.org): 400 000+
- Version: 3.7.8
- Official page: https://wordpress.org/plugins/facebook-for-woocommerce/

## What WP Masquerade hides

- Handled by WP Masquerade Pro only
- With Pro: signed HTML comments, folder name, tag IDs
- Still visible: files served by the vendor