Customers seeing other peoples WC orders & can access admin dashboard!?

  • Resolved efwebdesign

    (@efwebdesign)


    2 years, 4 months ago

    Hey guys,

    I’ve had a customer of my website contact me saying they’ve logged into their customer account and can see 3 other peoples woocommerce orders on their account and that they can see the WordPress Admin dashboard!?

    Upon inspecting ‘my orders’ on the admin account, I can see the same 3 orders. After inspecting the order details of each order, I can see the customer assigned to each of these 3 orders is myself (admin)?

    This also must mean the customer has somehow gained access to the admin account through their customer account?

    Now I have been experiencing an issue with my site where when I log into wp-admin, I sometimes get redirected to /my-account with no access to the admin dashboard. I’ve found a temporary fix for this by locating wp_usermeta in phpMyAdmin and changing wp_capabilities and wp_user_level fields from a:1:{s:8:”customer”;b:1;} and 1 to a:1:{s:13:”administrator”;b:1;} and 10 respectively. This grants me access to the dashboard. However, the original values (customer/1) soon return after a day or 2 requiring me to do this process every time I want to log in.

    Does anyone know what might be causing this?

Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Support Chris Moreira – a11n

    (@chrism245)

    Hi there!

    Please share your current System Status Report. You can get it by navigating to the WooCommerce / Status section of your site. Once there, click on the Get system report button and then copy it by clicking on the Copy for support button. Then paste it here in a comment.

    Can you provide a screenshot of this error as well? (Delete the billing information for privacy)

    You can paste it here, https://snipboard.io/, then send me the URL it provides so I can view the screenshot.

    Thread Starter efwebdesign

    (@efwebdesign)

    Hi Chris,

    Please find my system report below.

    
### WordPress Environment ###

WordPress address (URL): https://mscnutrition.co.uk
Site address (URL): https://mscnutrition.co.uk
WC Version: 6.8.2
REST API Version: ? 6.8.2
WC Blocks Version: ? 8.0.0
Action Scheduler Version: ? 3.4.0
Log Directory Writable: ?
WP Version: 6.1
WP Multisite: –
WP Memory Limit: 256 MB
WP Debug Mode: –
WP Cron: ?
Language: en_GB
External object cache: –

### Server Environment ###

Server Info: LiteSpeed
PHP Version: 7.4.30
PHP Post Max Size: 8 MB
PHP Time Limit: 300
PHP Max Input Vars: 2000
cURL Version: 7.85.0
OpenSSL/1.1.1q

SUHOSIN Installed: –
MySQL Version: 5.5.5-10.3.30-MariaDB
Max Upload Size: 2 MB
Default Timezone is UTC: ?
fsockopen/cURL: ?
SoapClient: ?
DOMDocument: ?
GZip: ?
Multibyte String: ?
Remote Post: ?
Remote Get: ?

### Database ###

WC Database Version: 6.8.2
WC Database Prefix: wp0j_
Total Database Size: 156.50MB
Database Data Size: 106.33MB
Database Index Size: 50.17MB
wp0j_woocommerce_sessions: Data: 0.24MB + Index: 0.01MB + Engine MyISAM
wp0j_woocommerce_api_keys: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_woocommerce_attribute_taxonomies: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_downloadable_product_permissions: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_order_items: Data: 2.20MB + Index: 1.12MB + Engine MyISAM
wp0j_woocommerce_order_itemmeta: Data: 11.99MB + Index: 9.38MB + Engine MyISAM
wp0j_woocommerce_tax_rates: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_woocommerce_tax_rate_locations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_shipping_zones: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_shipping_zone_locations: Data: 0.02MB + Index: 0.03MB + Engine MyISAM
wp0j_woocommerce_shipping_zone_methods: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_payment_tokens: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_payment_tokenmeta: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_woocommerce_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_actionscheduler_actions: Data: 4.38MB + Index: 1.45MB + Engine MyISAM
wp0j_actionscheduler_claims: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_actionscheduler_groups: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_actionscheduler_logs: Data: 3.32MB + Index: 2.44MB + Engine MyISAM
wp0j_commentmeta: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_comments: Data: 9.01MB + Index: 4.36MB + Engine MyISAM
wp0j_links: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_litespeed_url: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_litespeed_url_file: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_options: Data: 6.15MB + Index: 0.13MB + Engine MyISAM
wp0j_postmeta: Data: 29.18MB + Index: 17.85MB + Engine MyISAM
wp0j_posts: Data: 13.13MB + Index: 1.15MB + Engine MyISAM
wp0j_revslider_css: Data: 0.09MB + Index: 0.01MB + Engine MyISAM
wp0j_revslider_css_bkp: Data: 0.01MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_layer_animations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_layer_animations_bkp: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_navigations: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_navigations_bkp: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_sliders: Data: 0.02MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_sliders_bkp: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_slides: Data: 0.07MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_slides_bkp: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_static_slides: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_revslider_static_slides_bkp: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_sbi_feeds: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_sbi_feed_caches: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_sbi_instagram_feeds_posts: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_sbi_instagram_feed_locator: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_sbi_instagram_posts: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_sbi_sources: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_snippets: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_termmeta: Data: 0.01MB + Index: 0.02MB + Engine MyISAM
wp0j_terms: Data: 0.01MB + Index: 0.03MB + Engine MyISAM
wp0j_term_relationships: Data: 0.03MB + Index: 0.07MB + Engine MyISAM
wp0j_term_taxonomy: Data: 0.01MB + Index: 0.02MB + Engine MyISAM
wp0j_tm_taskmeta: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_tm_tasks: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_usermeta: Data: 7.93MB + Index: 6.11MB + Engine MyISAM
wp0j_users: Data: 1.04MB + Index: 1.02MB + Engine MyISAM
wp0j_viwec_clicked: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wc_admin_notes: Data: 0.03MB + Index: 0.00MB + Engine MyISAM
wp0j_wc_admin_note_actions: Data: 0.02MB + Index: 0.01MB + Engine MyISAM
wp0j_wc_category_lookup: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wc_customer_lookup: Data: 0.41MB + Index: 0.33MB + Engine MyISAM
wp0j_wc_download_log: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wc_order_coupon_lookup: Data: 0.02MB + Index: 0.03MB + Engine MyISAM
wp0j_wc_order_product_lookup: Data: 1.52MB + Index: 1.29MB + Engine MyISAM
wp0j_wc_order_stats: Data: 0.76MB + Index: 0.47MB + Engine MyISAM
wp0j_wc_order_tax_lookup: Data: 0.42MB + Index: 0.46MB + Engine MyISAM
wp0j_wc_product_attributes_lookup: Data: 0.01MB + Index: 0.02MB + Engine MyISAM
wp0j_wc_product_download_directories: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_wc_product_meta_lookup: Data: 0.01MB + Index: 0.01MB + Engine MyISAM
wp0j_wc_rate_limits: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wc_reserved_stock: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wc_tax_rate_classes: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_wc_webhooks: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfblockediplog: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfblocks7: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfconfig: Data: 1.97MB + Index: 0.02MB + Engine MyISAM
wp0j_wfcrawlers: Data: 0.01MB + Index: 0.00MB + Engine MyISAM
wp0j_wffilechanges: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wffilemods: Data: 4.84MB + Index: 0.58MB + Engine MyISAM
wp0j_wfhits: Data: 0.12MB + Index: 0.02MB + Engine MyISAM
wp0j_wfhoover: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfissues: Data: 0.02MB + Index: 0.01MB + Engine MyISAM
wp0j_wfknownfilelist: Data: 3.49MB + Index: 0.18MB + Engine MyISAM
wp0j_wflivetraffichuman: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wflocs: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wflogins: Data: 0.07MB + Index: 0.02MB + Engine MyISAM
wp0j_wfls_2fa_secrets: Data: 0.02MB + Index: 0.02MB + Engine InnoDB
wp0j_wfls_settings: Data: 0.02MB + Index: 0.00MB + Engine InnoDB
wp0j_wfnotifications: Data: 0.01MB + Index: 0.00MB + Engine MyISAM
wp0j_wfpendingissues: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfpklist_template_data: Data: 0.02MB + Index: 0.00MB + Engine MyISAM
wp0j_wfreversecache: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfsnipcache: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wfstatus: Data: 0.13MB + Index: 0.06MB + Engine MyISAM
wp0j_wftrafficrates: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_wt_iew_action_history: Data: 0.06MB + Index: 0.00MB + Engine MyISAM
wp0j_wt_iew_mapping_template: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_yoast_indexable: Data: 3.46MB + Index: 1.28MB + Engine MyISAM
wp0j_yoast_indexable_hierarchy: Data: 0.02MB + Index: 0.06MB + Engine MyISAM
wp0j_yoast_migrations: Data: 0.00MB + Index: 0.01MB + Engine MyISAM
wp0j_yoast_primary_term: Data: 0.00MB + Index: 0.00MB + Engine MyISAM
wp0j_yoast_seo_links: Data: 0.03MB + Index: 0.01MB + Engine MyISAM

### Post Type Counts ###

attachment: 294
nav_menu_item: 77
page: 40
post: 242
product: 22
product_variation: 36
revision: 1148
seedprod: 1
shop_coupon: 135
shop_order: 9709
shop_order_refund: 68
staticblocks: 1
testimonials: 6
viwec_template: 14
wpcf7_contact_form: 1
wppopups: 1

### Security ###

Secure connection (HTTPS): ?
Hide errors from visitors: ?

### Active Plugins (32) ###

All-in-One WP Migration Unlimited Extension: by ServMask – 2.46
All-in-One WP Migration: by ServMask – 7.64
Antispam Bee: by pluginkollektiv – 2.11.1
Classic Editor: by WordPress Contributors – 1.6.2
Code Snippets: by Code Snippets Pro – 3.2.0
Coming Soon Page, Maintenance Mode, Landing Pages & WordPress Website Builder by SeedProd: by SeedProd – 6.15.4
Contact Form 7 Captcha: by 247wd – 0.1.2
Contact Form 7: by Takayuki Miyoshi – 5.6.3
DT WooCommerce Page Builder: by DawnThemes – 2.0.4
Envato Market: by Envato – 2.0.7
XStore Core: by 8theme – 4.3.1
Feefo Ratings & Reviews: by Feefo – 1.0.8
Smash Balloon Instagram Feed: by Smash Balloon – 6.0.6
WPBakery Page Builder: by Michael M - WPBakery.com – 6.8.0
LiteSpeed Cache: by LiteSpeed Technologies – 5.2
Massive Addons for WPBakery Page Builder: by MassivePixelCreation – 2.4.8.1
Image optimisation service by Optimole: by Optimole – 3.4.5
WooCommerce PDF Invoices, Packing Slips, Delivery Notes and Shipping Labels: by WebToffee – 3.0.4
Really Simple SSL: by Really Simple Plugins – 5.3.3
Slider Revolution: by ThemePunch – 6.5.18
Simple Sitemap: by David Gwyer – 3.5.7
Advanced Editor Tools (previously TinyMCE Advanced): by Automattic – 5.6.0
Trust Payments Gateway ( 3DS2 ): by Trust Payments – 1.2.7
User Role Editor: by Vladimir Garagulya – 4.63.1
Product Subtitle For WooCommerce: by Varun Sridharan – 4.6.2
WooCommerce PayPal Payments: by WooCommerce – 1.9.3 (update to version 1.9.5 is available)
WooCommerce PDF Invoice: by RightPress – 3.2.1
WooCommerce: by Automattic – 6.8.2 (update to version 7.0.1 is available)
Wordfence Security: by Wordfence – 7.7.1
Yoast SEO: by Team Yoast – 19.9
WP Popups Lite: by timersys – 2.1.4.6
Custom Product Tabs for WooCommerce: by YIKES
Inc. – 1.7.9

### Inactive Plugins (0) ###

### Dropin Plugins (1) ###

maintenance.php: maintenance.php

### Settings ###

API Enabled: –
Force SSL: –
Currency: GBP (￡)
Currency Position: left
Thousand Separator: ,
Decimal Separator: .
Number of Decimals: 2
Taxonomies: Product Types: external (external)
grouped (grouped)
simple (simple)
variable (variable)

Taxonomies: Product Visibility: exclude-from-catalog (exclude-from-catalog)
exclude-from-search (exclude-from-search)
featured (featured)
outofstock (outofstock)
rated-1 (rated-1)
rated-2 (rated-2)
rated-3 (rated-3)
rated-4 (rated-4)
rated-5 (rated-5)

Connected to WooCommerce.com: –
Enforce Approved Product Download Directories: –

### WC Pages ###

Shop base: #25 - /shop/
Basket: #26 - /cart/
Checkout: #27 - /checkout/
My account: #28 - /my-account/
Terms and conditions: #5756 - /terms-conditions/

### Theme ###

Name: XStore Child
Version: 0.0.1
Author URL: https://8theme.com
Child Theme: ?
Parent Theme Name: XStore
Parent Theme Version: 8.3.1
Parent Theme Author URL: https://www.8theme.com
WooCommerce Support: ?

### Templates ###

Overrides: xstore/woocommerce/archive-product.php
xstore/woocommerce/cart/cart-empty.php
xstore/woocommerce/cart/cart-item-data.php
xstore/woocommerce/cart/cart-shipping.php
xstore/woocommerce/cart/cart.php
xstore/woocommerce/cart/cross-sells.php
xstore/woocommerce/cart/mini-cart.php
xstore/woocommerce/cart/proceed-to-checkout-button.php
xstore/woocommerce/checkout/form-billing.php
xstore/woocommerce/checkout/form-checkout.php
xstore/woocommerce/checkout/form-shipping.php
xstore/woocommerce/checkout/review-order.php
xstore/woocommerce/checkout/thankyou.php
xstore/woocommerce/content-product-cat.php
xstore/woocommerce/content-product.php
xstore/woocommerce/content-single-product.php
xstore/woocommerce/content-widget-product.php
xstore/woocommerce/content-widget-reviews.php
xstore/woocommerce/global/breadcrumb.php
xstore/woocommerce/global/form-login.php
xstore/woocommerce/global/wrapper-end.php
xstore/woocommerce/global/wrapper-start.php
xstore/woocommerce/loop/loop-end.php
xstore/woocommerce/loop/loop-start.php
xstore/woocommerce/loop/no-products-found.php
xstore/woocommerce/loop/result-count.php
xstore/woocommerce/myaccount/dashboard.php
xstore/woocommerce/myaccount/form-login.php
xstore/woocommerce/myaccount/navigation.php
xstore/woocommerce/single-product/add-to-cart/simple.php
xstore/woocommerce/single-product/meta.php
xstore/woocommerce/single-product/product-image.php
xstore/woocommerce/single-product/related.php
xstore/woocommerce/single-product/tabs/tabs.php
xstore/woocommerce/single-product/title.php
xstore/woocommerce/single-product/up-sells.php
xstore/woocommerce/single-product.php

### WooCommerce PayPal Payments ###

Onboarded: ?
Shop country code: GB
WooCommerce currency supported: ?
PayPal card processing available in country: ?
Pay Later messaging available in country: ?
Webhook status: –
Vault enabled: ?
Logging enabled: –
Reference Transactions: –
Used PayPal Checkout plugin: –
Tracking enabled: ?

### Admin ###

Enabled Features: activity-panels
analytics
coupons
customer-effort-score-tracks
experimental-products-task
experimental-import-products-task
experimental-fashion-sample-products
experimental-product-tour
shipping-smart-defaults
shipping-setting-tour
homescreen
marketing
mobile-app-banner
navigation
onboarding
onboarding-tasks
remote-inbox-notifications
remote-free-extensions
payment-gateway-suggestions
shipping-label-banner
subscriptions
store-alerts
transient-notices
wc-pay-promotion
wc-pay-welcome-page
wc-pay-subscriptions-page

Disabled Features: minified-js
settings

Daily Cron: ? Next scheduled: 2022-11-07 16:41:26 +00:00
Options: ?
Notes: 83
Onboarding: completed

### Action Scheduler ###

Complete: 347
Oldest: 2022-10-07 17:30:18 +0000
Newest: 2022-11-07 12:34:20 +0000

Pending: 1
Oldest: 2022-11-08 12:33:20 +0000
Newest: 2022-11-08 12:33:20 +0000

### Status report information ###

Generated at: 2022-11-07 12:36:55 +00:00

    Hi @efwebdesign

    Thanks for sending the System Status Report.

    WC Version: 6.8.2
WC Database Version: 6.8.2

    As a first step, please update WooCommerce core by following the guide here and the database by going to WooCommerce > Status > Tools > Update Database.

    User Role Editor: by Vladimir Garagulya – 4.63.1

    If you could also try to disable this plugin and see if this resolves the issue?

    Otherwise, this kind of problem is usually caused by a conflict with your theme or with another plugin present on your site. Can you please try to perform a full conflict test and see if that works?

    https://woocommerce.com/document/how-to-test-for-conflicts/

    If this was caused by a third-party plugin present on your site, it would be best to reach out to the developers for further assistance here.

    Let us know how it goes!

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Customers seeing other peoples WC orders & can access admin dashboard!?’ is closed to new replies.