Thousands of posts to /?wc-ajax=checkout
-
As documented in https://wordpress.org/support/topic/thousands-of-post-requests-to-wc-ajaxcheckout/page/2/ and in https://wordpress.org/support/topic/thousands-of-posts-to-wc-ajaxcheckout/ there is no prevention against credit card scammers testing tens of thousands of credit cards against Braintree using this plugin.
As a result of this I am seeing ~10k requests per day against a single checkout trying multiple cards. The result is tens of thousands of wp_comment records, slow server, warnings from Braintree and an angry merchant.
Your rep said there should be a fix soon over 2 years ago. Any news on this?
Cheers, Jason
-
Core development team tries hard to ignore the problem.
https://github.com/woocommerce/woocommerce/issues/28711 is a good example to look at.
You might also want to keep tabs on https://github.com/woocommerce/woocommerce/issues/24603 another attack vector wide open for anyone without a captcha, ignored by core development team.
- The topic ‘Thousands of posts to /?wc-ajax=checkout’ is closed to new replies.
