potential security vulnerability

i got the point of spam, but not getting the charges thing you are talking about. please explain.

thanks in advance.

He is talking about card testing, the scammer runs random card numbers to find out which ones work and which don’t resulting in your account being charged for the card run. Need a CAPTCHA to stop the script they are running or just to make it a pain in the ass for the human to keep running the cards.

My donate form was also hijacked using the same method above. Hundreds of credit cards were run through our donation form. I second the desire for Captcha integration.

The same thing happened to my client as what has been reported above. Hundreds of bogus credit card numbers run through the site. Are you planning to add more fields, CVV, Captcha? Anything to help resolve this? Thanks.

Same.