Order Received page being exploited
-
I have pasted the partial link.
I even tried and switch to storefront theme but that does not resolve this issue.
Someone is exploiting the the order received page and hitting it continuously.
When we close the order received page via htaccess the site functions normally.
When checked in AWStats 17000+ hits were found on the order received page.
How can we solve this problem?
My site WooCommerce status:
### WordPress Environment ### WordPress address (URL): https://www.sktthemes.org Site address (URL): https://www.sktthemes.org WC Version: 5.6.0 REST API Version: ? 5.6.0 WC Blocks Version: ? 5.5.1 Action Scheduler Version: ? 3.2.1 WC Admin Version: ? 2.5.1 Log Directory Writable: ? WP Version: 5.8 WP Multisite: – WP Memory Limit: 512 MB WP Debug Mode: – WP Cron: – Language: en_US External object cache: – ### Server Environment ### Server Info: LiteSpeed PHP Version: 7.4.23 PHP Post Max Size: 64 MB PHP Time Limit: 300 PHP Max Input Vars: 1000 cURL Version: 7.78.0 OpenSSL/1.1.1l SUHOSIN Installed: – MySQL Version: 5.5.5-10.3.31-MariaDB-log Max Upload Size: 8 MB Default Timezone is UTC: ? fsockopen/cURL: ? SoapClient: ? DOMDocument: ? GZip: ? Multibyte String: ? Remote Post: ? Remote Get: ? ### Database ### WC Database Version: 5.6.0 WC Database Prefix: zglajbaka_ Total Database Size: 1100.74MB Database Data Size: 821.19MB Database Index Size: 279.55MB zglajbaka_woocommerce_sessions: Data: 4.59MB + Index: 0.23MB + Engine MyISAM zglajbaka_woocommerce_api_keys: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_attribute_taxonomies: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_downloadable_product_permissions: Data: 78.57MB + Index: 53.95MB + Engine MyISAM zglajbaka_woocommerce_order_items: Data: 1.89MB + Index: 1.16MB + Engine MyISAM zglajbaka_woocommerce_order_itemmeta: Data: 15.98MB + Index: 11.39MB + Engine MyISAM zglajbaka_woocommerce_tax_rates: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_tax_rate_locations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_shipping_zones: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_shipping_zone_locations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_shipping_zone_methods: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woocommerce_payment_tokens: Data: 0.02MB + Index: 0.01MB + Engine MyISAM zglajbaka_woocommerce_payment_tokenmeta: Data: 0.06MB + Index: 0.06MB + Engine MyISAM zglajbaka_woocommerce_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_actionscheduler_actions: Data: 0.43MB + Index: 0.19MB + Engine MyISAM zglajbaka_actionscheduler_claims: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_actionscheduler_groups: Data: 0.00MB + Index: 0.01MB + Engine MyISAM zglajbaka_actionscheduler_logs: Data: 0.32MB + Index: 0.23MB + Engine MyISAM zglajbaka_aepc_custom_audiences: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_commentmeta: Data: 0.57MB + Index: 0.42MB + Engine MyISAM zglajbaka_comments: Data: 10.75MB + Index: 4.94MB + Engine MyISAM zglajbaka_itsec_bans: Data: 0.07MB + Index: 0.08MB + Engine MyISAM zglajbaka_itsec_dashboard_events: Data: 0.00MB + Index: 0.01MB + Engine MyISAM zglajbaka_itsec_distributed_storage: Data: 8.98MB + Index: 0.00MB + Engine MyISAM zglajbaka_itsec_fingerprints: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_itsec_geolocation_cache: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_itsec_lockouts: Data: 0.00MB + Index: 0.01MB + Engine MyISAM zglajbaka_itsec_logs: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_itsec_mutexes: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_itsec_opaque_tokens: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_itsec_temp: Data: 0.00MB + Index: 0.01MB + Engine MyISAM zglajbaka_itsec_user_groups: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_links: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_litespeed_img_optm: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_nxs_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_options: Data: 108.69MB + Index: 25.12MB + Engine MyISAM zglajbaka_pmxe_exports: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_pmxe_google_cats: Data: 0.26MB + Index: 0.05MB + Engine MyISAM zglajbaka_pmxe_posts: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_pmxe_templates: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_postmeta: Data: 138.72MB + Index: 72.95MB + Engine MyISAM zglajbaka_posts: Data: 173.09MB + Index: 10.76MB + Engine MyISAM zglajbaka_racart_cartemail: Data: 141.03MB + Index: 22.92MB + Engine MyISAM zglajbaka_redirection_404: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_redirection_groups: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_redirection_items: Data: 0.18MB + Index: 0.18MB + Engine MyISAM zglajbaka_redirection_logs: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_redirection_modules: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_sktsub_subscription: Data: 0.02MB + Index: 0.00MB + Engine MyISAM zglajbaka_structuring_markup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_termmeta: Data: 0.02MB + Index: 0.03MB + Engine MyISAM zglajbaka_terms: Data: 0.32MB + Index: 0.45MB + Engine MyISAM zglajbaka_term_relationships: Data: 0.48MB + Index: 0.85MB + Engine MyISAM zglajbaka_term_taxonomy: Data: 0.53MB + Index: 0.23MB + Engine MyISAM zglajbaka_tm_taskmeta: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_tm_tasks: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_usermeta: Data: 68.13MB + Index: 38.32MB + Engine MyISAM zglajbaka_users: Data: 4.57MB + Index: 3.36MB + Engine MyISAM zglajbaka_wcs_payment_retries: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_admin_notes: Data: 0.01MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_admin_note_actions: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_category_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_customer_lookup: Data: 3.50MB + Index: 2.20MB + Engine MyISAM zglajbaka_wc_download_log: Data: 11.83MB + Index: 9.56MB + Engine MyISAM zglajbaka_wc_order_coupon_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_order_product_lookup: Data: 3.86MB + Index: 2.75MB + Engine MyISAM zglajbaka_wc_order_stats: Data: 2.68MB + Index: 1.69MB + Engine MyISAM zglajbaka_wc_order_tax_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_product_meta_lookup: Data: 0.03MB + Index: 0.04MB + Engine MyISAM zglajbaka_wc_reserved_stock: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_wc_tax_rate_classes: Data: 0.00MB + Index: 0.01MB + Engine MyISAM zglajbaka_wc_webhooks: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_woo_sales_country_region: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_yith_ywsbs_activities_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM zglajbaka_yoast_indexable: Data: 26.99MB + Index: 8.50MB + Engine MyISAM zglajbaka_yoast_indexable_hierarchy: Data: 1.54MB + Index: 3.51MB + Engine MyISAM zglajbaka_yoast_migrations: Data: 0.00MB + Index: 0.01MB + Engine MyISAM zglajbaka_yoast_primary_term: Data: 0.11MB + Index: 0.12MB + Engine MyISAM zglajbaka_yoast_seo_links: Data: 11.73MB + Index: 2.70MB + Engine MyISAM zglajbaka_yoast_seo_meta: Data: 0.64MB + Index: 0.54MB + Engine MyISAM ### Post Type Counts ### amp_validated_url: 1 attachment: 8857 faq: 38 forum: 33 job_listing: 62 nav_menu_item: 27 oembed_cache: 5131 page: 40 post: 2469 product: 473 reply: 59616 revision: 8572 shop_coupon: 1 shop_order: 41285 shop_order_refund: 62 shop_subscription: 89 testimonials-widget: 14 topic: 14830 wpcf7_contact_form: 3 ywsbs_subscription: 2315 ### Security ### Secure connection (HTTPS): ? Hide errors from visitors: ? ### Active Plugins (30) ### Antispam Bee: by pluginkollektiv – 2.10.0 bbP topic count: by Robin Wilson – 2.8 bbPress Stay Checked: by Ephrain Marchan – 1.0 bbPress: by The bbPress Contributors – 2.6.6 iThemes Security: by iThemes – 8.0.2 WordPress Backup & Security Plugin - BlogVault: by Backup by BlogVault – 4.64 Classic Editor: by WordPress Contributors – 1.6.2 Contact Form 7: by Takayuki Miyoshi – 5.4.2 Disable Feeds: by Samir Shah BBpress support by Matthew Sigley – 1.4.4 FastSpring: by SKT Themes – 70.0 Force First and Last Name as Display Name: by Stranger Studios – 1.2 Header and Footer Scripts: by Digital Liberation – 2.2.1 Jetpack: by Automattic – 10.0 Meta Generator and Version Info Remover: by Pankaj Kumar Mondal – 13.0 Post Types Order: by Nsp Code – 1.9.5.6 Recover abandoned cart for WooCommerce: by SKT Themes – 200 Redirection: by John Godley – 5.1.3 Bitcoin Payment Gateway for WooCommerce: by TripleA – 1.6.3 User Switching: by John Blackbourn & contributors – 1.5.7 Checkout Field Editor for WooCommerce: by ThemeHigh – 1.4.9 Stripe For WooCommerce: by Payment Plugins [email protected] – 3.3.9 WooCommerce Sequential Order Numbers: by SkyVerge – 1.9.5 WooCommerce: by Automattic – 5.6.0 Yoast SEO: by Team Yoast – 17.0 WP Force SSL: by WebFactory Ltd – 1.57 WP Job Manager: by Automattic – 1.35.2 WP-Paginate: by Max Foundry – 2.1.7 WP-ShowHide: by Lester 'GaMerZ' Chan – 1.04 Markup (JSON-LD) structured in schema.org: by Kazuya Takami – 4.8.1 YITH Infinite Scrolling: by YITH – 1.5.2 ### Inactive Plugins (1) ### SKT WooCommerce Subscription: by SKT Themes – 1.0 ### Settings ### API Enabled: ? Force SSL: ? Currency: USD ($) Currency Position: left Thousand Separator: , Decimal Separator: . Number of Decimals: 2 Taxonomies: Product Types: external (external) grouped (grouped) simple (simple) subscription (subscription) variable (variable) variable subscription (variable-subscription) Taxonomies: Product Visibility: exclude-from-catalog (exclude-from-catalog-2) exclude-from-catalog (exclude-from-catalog) exclude-from-search (exclude-from-search) featured (featured) featured (featured-2) outofstock (outofstock-2) outofstock (outofstock) rated-1 (rated-1) rated-2 (rated-2-3) rated-2 (rated-2) rated-2 (rated-2-2) rated-3 (rated-3) rated-4 (rated-4-2) rated-4 (rated-4) rated-5 (rated-5) rated-5 (rated-5-2) rated-5 (rated-5-3) Connected to WooCommerce.com: ? ### WC Pages ### Shop base: #182943 - /shop/ Cart: #39 - /cart/ Checkout: #40 - /checkout/ My account: #41 - /my-account/ Terms and conditions: #5009 - /terms-conditions/ ### Theme ### Name: New SKT Theme Version: (update to version 0 is available) Author URL: https://www.shrikrishnatechnologies.com Child Theme: ? – If you are modifying WooCommerce on a parent theme that you did not build personally we recommend using a child theme. See: How to create a child theme WooCommerce Support: ? ### Templates ### Overrides: new-skt-themes/archive-product.php version - is out of date. The core version is 3.4.0 new-skt-themes/woocommerce/myaccount/form-login.php new-skt-themes/woocommerce/myaccount/my-account.php new-skt-themes/single-product.php version - is out of date. The core version is 1.6.4 new-skt-themes/woocommerce/taxonomy-product_cat.php version - is out of date. The core version is 4.7.0 Outdated Templates: ? Learn how to update ### Action Scheduler ### Complete: 1,639 Oldest: 2021-08-24 11:20:40 +0530 Newest: 2021-09-03 06:54:57 +0530 Pending: 53 Oldest: 2021-09-03 07:59:33 +0530 Newest: 2022-08-28 00:41:36 +0530 Canceled: 1 Oldest: -0001-11-30 05:53:28 +0553 Newest: -0001-11-30 05:53:28 +0553 ### Status report information ### Generated at: 2021-09-03 07:58:53 +05:30
- The topic ‘Order Received page being exploited’ is closed to new replies.