• Within days of installing this extension a hacker used my stripe account to do a card verification attack that cost my small business a good amount of money. I follow all of the WP security best practices and even have plugins set to auto-update.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author WebToffee

    (@webtoffee)

    Hi @espradley,

    We are extremely sorry to hear about the unfortunate incident.

    We can assure you that the plugin follows all security standards enforce by Stripe regarding payment processing such as 3d secure and also, the plugin code follows all WordPress security standards.

    If you have anything to share that proves the issue was caused by the plugin code, please feel free to share.

    Please consider the Stripe Checkout for CC payments that other Stripe plugins do not have. Hackers can’t steal CC data as the input & verification happens at the Stripe premises, so it becomes their responsibility not yours.

    qwik3r

    (@qwik3r)

    @espradley I’m interested in knowing more about this card verification attack that occurred. You’re certain that this plugin was at fault for this?

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Hacked within days’ is closed to new replies.