wpnomad a11n

Hi @developersuseonly ,

At the moment, you can delete the API keys directly form the WordPress site dashboard (under WP Admin > WooCommerce > Settings > Advanced). As mentioned earlier, there isn’t a way to delete the API key using Rest API, however, it may be possible to implement a custom solution via code for this. For custom solution, I recommend collaborating with a developer.

Sounds good, @blackbird69 !

Hi @mildaco ,
Taking a step back — I reviewed the code you’re trying to add and I see that it is for “Google Customer Reviews”. That’s not a feature of Google Listings & Ads and the plugin doesn’t have a way to enable it by adding the code.

If you’re unsure how you can add the code to your site’s PHP template, then I’d recommend engaging a developer for the change. Alternatively, you may search Google for “Google Merchant Center Customer Reviews Integration for WooCommerce” to find alternative plugin options for customer reviews.

Hi @blackbird69 ,

We discussed it with the development team and this vulnerability was fixed in a previous version of WooCommerce — so if your site is running the latest version of WooCommerce then this is likely a false positive. Kindly ensure that your site is running the latest version of WooCommerce and also ensure other plugins and themes as well as the server security software are up to date.

Hi @aghio ,

you can register with any email (even if the email doesn’t exists). Just let me.know and I will authorize the user and assign the right access.

Posting email addresses in this forum (even if they don’t exist) is against forum guidelines. Feel free to modify the permissions either on the live or a staging site so we can access checkout and test this further.

hi @lkraav ,

I understand the frustration this has led to. On this issue, the developers clarified how preventing account creation on checkout is not as straightforward and on the other one the devs asked for more information (logs) but didn’t receive any.

Nevertheless, spam orders/card testing attacks on site can be frustrating. You can still open suggestion to build in a feature to prevent this in core WooCommerce as an Enhancement Request. For the time being, you may consider using plugins to prevent card testing/bot orders.

hi @joukeschotanus ,

I checked your site further and found that your theme (Astra) is handling the product details. The code that you see are HTML codes basically (<b> for example is used to start formatting the text as “bold”).

With the default WooCommerce themes like Storefront, the HTML is not passed on with product data to Google Listings & Ads, however, different themes handle HTML differently and in case, your theme is leaving over HTML that gets sent over to Google Listing.

You may consider working with your theme support to check for workarounds — or consider using a default theme like Storefront.

Hi @spinseller786 ,

None of the above helped , issue still persists

Can you please confirm if you performed the conflict test exactly as described here?

Also, please go to WP Admin → WooCommerce → Status → Logs, and on he right side dropdown — check for “fatal error” and “Google listings” related logs. If you see those logs then please copy and paste the log here so we can review. Make sure to obfuscate any sensitive details from the log.

i @galapogos01 ,

How can we escalate this with the core security team?

I’d recommend opening an issue on WooCommerce GitHub to start a discussion with the development team.

Hi @chrishaff ,

Did the re-build involve copying the site or the database to a new instance and then building the new site over there? I suspect the posts table data didn’t get fully copied over at that time resulting into the issue.

An approach here would be to extract the data from the database for those dates and then importing them again into the current site.

Hi @developersuseonly ,

The WooCommerce Rest API doesn’t allow for CRUD operations on the API keys themselves — you can find details of all the supported operations here: https://woocommerce.github.io/woocommerce-rest-api-docs/

What you’re trying to achieve would require custom development.

Hi there,

Thanks for providing further details. This doesn’t sound good — especially that the setup page isn’t working as expected on new installs and 60 second load time for WooCommerce.

I’m wondering if this is a host specific issue. Have you tried setting up your site on a different host to confirm that?

Hi @krdza93 ,

Found in DB I found “transient_wc_report” with some of the insane numbers, removed everything with “transient_wc_report” did not help either, it keeps “recreating” transients to the DB.

As I understand, you tried deleting the transient directly from the database — is that right? If so, then I suspect there may be something wrong with the database user permission or the database itself, which would explain why this can’t be deleted and the inconsistency in analytics as well.

Can you please check with your web host to check the database and database logs and ensure it’s running fine?

Alternatively, you can download the database and open it on your computer or on another server by importing there and check if you can delete the transients. You can do so on your computer by using a database management software like TablePlus.

Hi @thiagorangel ,

Sorry to know that you’ve moved to another plugin. In the future, if you decide on giving Google Listings & Ads another try and need any help —?then do reach out to us!

Hi @thiagorangel ,

Unfortunately, by the time I got to open the QuickForget link, the report/secret was already forgotten: https://d.pr/i/xlNZY5

The report pasted here would be accessible to anyone viewing it. If you wish, please contact us at WooCommerce.com > My Account > Support and share your site status report there so we can privately review it. You may need to create an account before you can access that page.

Please include a link to this forum thread, so that we can keep track of what’s already been done.

We will be able to help you further there.