Action required: Security update for WooCommerce Payments

  • Resolved veromary

    (@veromary)


    1 year, 6 months ago

    I too am grievously afflicted with the persistent message despite having updated WooCommerce Payments to Version: 5.8.1 :

    “Action required: Security update for WooCommerce Payments“

    I see that to resolve this issue I must start a separate thread.

    Here is the log:

    `
### WordPress Environment ###

WordPress address (URL): https://shop.jubil.us
Site address (URL): https://shop.jubil.us
WC Version: 7.7.0
REST API Version: ? 7.7.0
WC Blocks Version: ? 10.0.4
Action Scheduler Version: ? 3.5.4
Log Directory Writable: ?
WP Version: 6.2
WP Multisite: –
WP Memory Limit: 256 MB
WP Debug Mode: –
WP Cron: ?
Language: en_AU
External object cache: –

### Server Environment ###

Server Info: LiteSpeed
PHP Version: 7.4.33
PHP Post Max Size: 128 MB
PHP Time Limit: 300
PHP Max Input Vars: 3000
cURL Version: 7.84.0
OpenSSL/1.1.1p

SUHOSIN Installed: –
MySQL Version: 5.5.5-10.6.13-MariaDB
Max Upload Size: 128 MB
Default Timezone is UTC: ?
fsockopen/cURL: ?
SoapClient: ?
DOMDocument: ?
GZip: ?
Multibyte String: ?
Remote Post: ?
Remote Get: ?

### Database ###

WC Database Version: 7.7.0
WC Database Prefix: vgsp_
Total Database Size: 12.74MB
Database Data Size: 10.56MB
Database Index Size: 2.18MB
vgsp_woocommerce_sessions: Data: 1.31MB + Index: 0.04MB + Engine MyISAM
vgsp_woocommerce_api_keys: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_woocommerce_attribute_taxonomies: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_downloadable_product_permissions: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_order_items: Data: 0.03MB + Index: 0.02MB + Engine MyISAM
vgsp_woocommerce_order_itemmeta: Data: 0.15MB + Index: 0.11MB + Engine MyISAM
vgsp_woocommerce_tax_rates: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_tax_rate_locations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_shipping_zones: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_shipping_zone_locations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_shipping_zone_methods: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_payment_tokens: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_payment_tokenmeta: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_woocommerce_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_actionscheduler_actions: Data: 0.60MB + Index: 0.26MB + Engine MyISAM
vgsp_actionscheduler_claims: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_actionscheduler_groups: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_actionscheduler_logs: Data: 0.45MB + Index: 0.31MB + Engine MyISAM
vgsp_commentmeta: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_comments: Data: 0.14MB + Index: 0.05MB + Engine MyISAM
vgsp_gla_budget_recommendations: Data: 0.11MB + Index: 0.12MB + Engine MyISAM
vgsp_gla_merchant_issues: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_gla_shipping_rates: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_gla_shipping_times: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_links: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailchimp_carts: Data: 0.01MB + Index: 0.00MB + Engine MyISAM
vgsp_mailchimp_jobs: Data: 0.03MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_custom_fields: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_dynamic_segment_filters: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_feature_flags: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_forms: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_mapping_to_external_entities: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_newsletters: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_newsletter_links: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_newsletter_option: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_newsletter_option_fields: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_mailpoet_newsletter_posts: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_newsletter_segment: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_newsletter_templates: Data: 1.04MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_scheduled_tasks: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_mailpoet_scheduled_task_subscribers: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_segments: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_mailpoet_sending_queues: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_settings: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_bounces: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_clicks: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_forms: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_newsletters: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_opens: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_unsubscribes: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_statistics_woocommerce_purchases: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_stats_notifications: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_subscribers: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_mailpoet_subscriber_custom_field: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_subscriber_ips: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_subscriber_segment: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_user_agents: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_mailpoet_user_flags: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_options: Data: 5.26MB + Index: 0.49MB + Engine MyISAM
vgsp_postmeta: Data: 0.95MB + Index: 0.48MB + Engine MyISAM
vgsp_posts: Data: 0.28MB + Index: 0.07MB + Engine MyISAM
vgsp_termmeta: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_terms: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_term_relationships: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_term_taxonomy: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_usermeta: Data: 0.04MB + Index: 0.01MB + Engine MyISAM
vgsp_users: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_wc_admin_notes: Data: 0.05MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_admin_note_actions: Data: 0.03MB + Index: 0.01MB + Engine MyISAM
vgsp_wc_category_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_customer_lookup: Data: 0.02MB + Index: 0.02MB + Engine MyISAM
vgsp_wc_download_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_order_coupon_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_order_product_lookup: Data: 0.02MB + Index: 0.02MB + Engine MyISAM
vgsp_wc_order_stats: Data: 0.02MB + Index: 0.02MB + Engine MyISAM
vgsp_wc_order_tax_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_product_attributes_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_product_download_directories: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_wc_product_meta_lookup: Data: 0.01MB + Index: 0.02MB + Engine MyISAM
vgsp_wc_rate_limits: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_reserved_stock: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
vgsp_wc_tax_rate_classes: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
vgsp_wc_webhooks: Data: 0.01MB + Index: 0.00MB + Engine MyISAM

### Post Type Counts ###

attachment: 81
customize_changeset: 2
feedback: 24
mailpoet_page: 1
nav_menu_item: 18
page: 11
post: 3
product: 32
product_variation: 27
revision: 22
shop_order: 228
wp_global_styles: 2

### Security ###

Secure connection (HTTPS): ?
Hide errors from visitors: ?

### Active Plugins (10) ###

Akismet Anti-Spam: by Automattic – 5.1
Facebook for WooCommerce: by Facebook – 3.0.23
Jetpack: by Automattic – 12.1
Limit Login Attempts Reloaded: by Limit Login Attempts Reloaded – 2.25.16
Mailchimp for WooCommerce: by Mailchimp – 2.8.3
Printful Integration for WooCommerce: by Printful – 2.1.35
Simple Cloudflare Turnstile: by Elliot Sowersby
RelyWP – 1.18.5

WooCommerce Payments: by Automattic – 5.8.1
WooCommerce Shipping & Tax: by WooCommerce – 2.2.4
WooCommerce: by Automattic – 7.7.0

### Inactive Plugins (4) ###

CMB2: by CMB2 team – 2.10.1
MailPoet: by MailPoet – 4.15.0
reCAPTCHA for WooCommerce: by Elliot Sowersby
RelyWP – 1.2.10

Tracking Info to WooCommerce order: by Damien Carbery – 0.8

### Must Use Plugins (1) ###

WordPress automation by Installatron: by  –

### Settings ###

API Enabled: –
Force SSL: –
Currency: AUD ($)
Currency Position: left
Thousand Separator: ,
Decimal Separator: .
Number of Decimals: 2
Taxonomies: Product Types: external (external)
grouped (grouped)
simple (simple)
variable (variable)

Taxonomies: Product Visibility: exclude-from-catalog (exclude-from-catalog)
exclude-from-search (exclude-from-search)
featured (featured)
outofstock (outofstock)
rated-1 (rated-1)
rated-2 (rated-2)
rated-3 (rated-3)
rated-4 (rated-4)
rated-5 (rated-5)

Connected to WooCommerce.com: –
Enforce Approved Product Download Directories: ?
HPOS feature screen enabled: –
HPOS feature enabled: –
Order datastore: WC_Order_Data_Store_CPT
HPOS data sync enabled: –

### WC Pages ###

Shop base: #6 - /shop/
Cart: #7 - /cart/
Checkout: #8 - /checkout/
My account: #9 - /my-account/
Terms and conditions: #152 - /terms-and-conditions/

### Theme ###

Name: Storefront
Version: 4.2.0
Author URL: https://woocommerce.com/
Child Theme: ? – If you are modifying WooCommerce on a parent theme that you did not build
personally we recommend using a child theme. See: How to create a child theme

WooCommerce Support: ?

### Templates ###

Overrides: –

### Admin ###

Enabled Features: activity-panels
analytics
coupons
customer-effort-score-tracks
import-products-task
experimental-fashion-sample-products
shipping-smart-defaults
shipping-setting-tour
homescreen
marketing
mobile-app-banner
navigation
onboarding
onboarding-tasks
remote-inbox-notifications
remote-free-extensions
payment-gateway-suggestions
shipping-label-banner
subscriptions
store-alerts
transient-notices
woo-mobile-welcome
wc-pay-promotion
wc-pay-welcome-page

Disabled Features: product-block-editor
minified-js
new-product-management-experience
product-variation-management
settings

Daily Cron: ? Next scheduled: 2023-05-15 23:48:12 +10:00
Options: ?
Notes: 120
Onboarding: completed

### WooCommerce Payments ###

Version: 5.8.1
Connected to WPCOM: Yes
Blog ID: 208132747
Account ID: acct_1LCsjM2EnKYIOsi4

### Action Scheduler ###

Canceled: 1
Oldest: 2023-05-10 13:14:23 +1000
Newest: 2023-05-10 13:14:23 +1000

Complete: 2,240
Oldest: 2023-04-14 11:59:43 +1000
Newest: 2023-05-15 11:28:24 +1000

Failed: 14
Oldest: 2022-09-04 20:18:32 +1000
Newest: 2023-05-14 13:01:06 +1000

Pending: 2
Oldest: 2023-05-16 04:16:27 +1000
Newest: 2023-05-16 09:15:16 +1000


### Status report information ###

Generated at: 2023-05-15 11:46:36 +10:00
`
Viewing 15 replies - 1 through 15 (of 16 total)

  • Hi @veromary

    Thanks for reaching out!

    I am sorry to hear that you’re unable to dismiss the notification above about the WooCommerce Payments plugin despite being updated.

    One workaround is to change this directly in the database. You can install WP phpMyAdmin to do it. Or you can do it in your host control panel.

    Look for the?wp_wc_admin_note_actions?table and search for the name,?woocommerce-wcpay-march-2023-update-needed. Be sure to change its status to?actioned?and that’s it, the notification will be dismissed.

    Hope this helps!

    Hi,

    We haven’t heard back from you in a while, so I’m going to mark this as resolved – we’ll be here if and/or when you are ready to continue.

    Best.

    Just a bump as I too appear to have this issue which I cannot clear.

    In my case though, I don’t have a woocommerce-wcpay-march-2023-update-needed entry in the wp_wc_admin_note_actions table.

    Should I insert this? How can I solve this please?

    Same issue here. WooCommerce Payments has been updated to the most recent version which is 6.1.1.

    There’s the continous message ‘Action required: Security update of WooCommerce Payments‘ in the dashboard. Clicking the ‘Dismiss’ button does not change anything, nor does clicking the ‘See available updates’ button.

    Quite annoying for my client…

    This issue has been set to ‘Resolved’ but actually it’s not.

    Hi there @veromary

    Just to clarify, were you able to dismiss the notification?

    @tfboy @newoceans ??

    Thank you for contacting Woo support!

    Action required: Security update for WooCommerce Payments

    If you have access to the database, one workaround you can try is to locate the notice in one of these tables and change its status.

    • _wc_admin_notes
    • _wc_admin_note_actions


    Link to image: https://d.pr/i/3KYfkX

    Just to note, there are reports that a different wording worked (link here), therefore, feel free to try that also, if actioned won’t do the trick.

    Let us know how that goes, cheers!

    • This reply was modified 1 year, 4 months ago by anastas10s. Reason: rephrase
    • This reply was modified 1 year, 4 months ago by anastas10s. Reason: added missing URL

    Thanks for the reply.

    To be honest, I’m not a big fan of editing the database. In my opinion a click at the button ‘Dismiss’ should change this database field value. Or even better: the plugin should be able to see that it has been updated to the latest version, and if so, turn off the message automatically.

    Can’t you guys just provide a minor update where this has been solved?

    • This reply was modified 1 year, 4 months ago by Marc Bijl.

    Hello all,

    Today, I can confirm this issue is still an issue.

    I fully updated my client’s website, all plugins to their latest versions, but the WooCommerce Payment security notice will not disappear.

    I tried the Database ‘hack’, and the notice is still showing.

    Also still seeing this as an issue. Come on guys can’t you sort this once and for all??

    KISS – keep it simple stupid … amend your plugin and we can all stop wasting out time clearing up your coding error… please ??

    Plugin Support Chris M. – a11n

    (@csmcneill)

    Howdy @newoceans @macuseruk @sushihost @jhtrae,

    This issue is not with WooPayments—it’s an issue with the core WooCommerce plugin and how it handles these notices in the database.

    We thought that this issue was resolved in version 7.8.0 of WooCommerce, but an additional fix is needed to allow these types of notices to be dismissed across a more diverse range of sites. We’re shipping an additional fix in version 8.0.0 of WooCommerce, which we expect to release in early August.

    In the meantime, this notice can be cleared by modifying the database via this method mentioned previously. Another option would be to use a snippet like this one to remove these entries from the database. However, please make sure that there is a site backup made via a tool like Jetpack VaultPress Backup prior to making any modifications to the database.

    Katie

    (@abridgeeducamp)

    Still having this issue (WooCommerce 7.8.2) – any fix yet?

    Hi @abridgeeducamp

    Thanks for reaching out!

    Have you tried updating WooCommerce to the latest release and see if this resolves your issue here?

    It’s almost a year since this thread started and it’s still an issue. I have a HUGE “Action required: Security update of WooCommerce Payments” banner that cannot be dismissed by any action.

    I’ve even gone into the DB and changed the two entries I could find with woocommerce-wcpay in the name from unactioned to actioned and that does not work. WC and WooPayments are up to date and I even deactivated WooPayments to see if it would go away and it does not.

    did I mention that this notice is frikkin’ enormous?

    Plugin Support Shameem R. a11n

    (@shameemreza)

    Hi @cmerrick,

    Sorry to hear that you are experiencing the same issue.

    Did you follow the guide shared here and here? If so, and the issue continues, to align with?forum best practices, please create a new topic so that we can address your issue(s) separately. You can create a new thread here.

    Make sure to include the steps you have taken and a copy of the following:

    • System Status Report: Navigate to WooCommerce → Status. Select Get System Report and then Download for Support.
    • Fatal Error log: Share a copy of any fatal error log found under WooCommerce → Status → Logs.

    You could copy and paste your reply or share it via Mozilla Community Pastebin and share the link here. This will help us investigate further and provide you with a more accurate solution.

    Thanks for understanding!

    Thanks for the reply — I figured it would be inappropriate to start a new thread for what seemed like the exact same issue? At any rate, I did try the various DB options which didn’t eliminate the banner which I was seeing on the Products screen. But after doing the DB thing and still seeing the banner on Products, I went to the WooCommerce landing screen, dismissed it from there, and that eliminated it from the Products screen as well. So, some combination of steps has resolved it.

Viewing 15 replies - 1 through 15 (of 16 total)
  • The topic ‘Action required: Security update for WooCommerce Payments’ is closed to new replies.

Tags