Automatic Deletion of Products

First of all try something like this: https://www.ads-software.com/plugins/aryo-activity-log/ to make sure noone is doing it manually.

Check your users – look for any Admin accounts that you don’t recognize.

Get all Admin users to change their passwords.

Change the database password

Change the CPanel login password (if someone has that, they can access the database directly!)

Are you using anything that connects to the REST API? If so, revoke and recreate the keys.

I’ve already used an activity log plugin, it’s not done manually it shows me that the products were deleted by woocommerce system with the IP adress of the hosting server. And there are no admin accounts I don’t recongize

What does it show exactly?

Here is a screenshot of it: https://ibb.co/mF1BVxs

I would think that may be coming from the API – do you have anything enabled in WooCommerce-Advanced-Rest API?

Is the Legacy API turned off?

Also, do you have any security plugins enabled? For example WordFence?

If not then install it and run a full scan of the installed files – that will show if any of the plugins/core files have been compromised.

No I don’t have any Rest API key, and Legacy API is off, but I’m using a multivendor plugin, WCFM could it have some interference?

Never used WCFM so I don’t know. Will definitely be worth contacting their support to ask though.

I’d still go though all the passwords and change everything just in case.

I found that there is indeed a WCFM Rest API plugin, I deactivated it, I still didn’t get a reply from WCFM team, but can the Rest API be the cause?, I can’t be sure as the products are permanently deleted and won’t come back

Hi there!

Thank you for providing more information about the issue. Since you have the WCFM REST API plugin installed, it’s possible that it was making API calls that resulted in product deletions.

Additionally, since the deletions are logged with your hosting server’s IP, I recommend checking with your hosting provider to see if they have any automated processes (e.g., database cleanups) that might be affecting WooCommerce products.

I also suggest checking WooCommerce > Status > Logs for any API-related logs or errors. Some plugins or custom code may run background tasks that delete products, so it’s also worth reviewing WooCommerce > Status > Scheduled Actions to see if there are any actions related to product deletions.

Let us know what you find!

Thank you for your response and the helpful recommendations.

I reached out to my hosting provider, and they’ve confirmed that there’s nothing on their side that could be causing the issue. They suggested it might be related to WooCommerce itself.

Following your suggestions, I made several changes: I updated all plugins and the theme, deactivated the WCFM REST API plugin, turned off stock management, and kept only one admin account active. After testing for a week, I noticed that no products were removed during this period.

I’ve now re-enabled stock management and am monitoring the situation with the WP Activity Log plugin to see if any changes occur.

Regarding the logs, I checked WooCommerce > Status > Logs, and all I found was wc_logger. In the Scheduled Actions section, I didn’t find any actions related to product deletions.

I’ll continue monitoring closely and let you know if I see any further issues.

Hi @minamt,

Thank you for the detailed update – it sounds like you’ve made great progress in narrowing down the potential causes!

It’s good to hear that no products were removed during the testing period after making those changes. Monitoring with the WP Activity Log plugin is a great idea, and hopefully, it will help pinpoint any unusual activity.

If the issue arises again, it might be helpful to review the logs and check if any actions are logged under the specific time frame when a product gets deleted. Sometimes, a background task or scheduled action that wasn’t previously visible can be the culprit.

Thank you. Let us know if you find out anything.

Hi,

I wanted to update you that another product was deleted after I re-enabled WooCommerce stock management. Could this be linked to the issue, as that was the only change I made recently.

Looking forward to your thoughts on this.

Hello minamt,

Thank you for your reply.

To confirm, are you referring to the Manage Stock option under WooCommerce > Settings > Products > Inventory?

Could you tell me which other plugins or custom code are active at the moment?
We have not received any other reports like this so I suspect this could be caused by multiple factors.

Can you repeat your steps and confirm if this happens again?

Looking forward to your response. ??

Hello,

Thank you for your reply.

Yes, I was referring to the Manage Stock option under WooCommerce > Settings > Products > Inventory. I’m not sure if this is causing the problem.

As for the other active plugins or custom code, I’ve gathered a list of the plugins currently installed and activated on the website:

All-in-One WP Migration With Import: version: 6.77, author: ServMask, Mises à jour auto désactivées
All In One WP Security: version: 5.3.8, author: TeamUpdraft, DavidAnderson, Mises à jour auto désactivées
Checkout Field Editor for WooCommerce: version: 2.1.2, author: ThemeHigh, Mises à jour auto désactivées
Classic Editor: version: 1.6.7, author: WordPress Contributors, Mises à jour auto désactivées
CMP - Coming Soon & Maintenance Plugin: version: 4.1.13, author: NiteoThemes, Mises à jour auto désactivées
Contact Form 7: version: 6.0.3, author: Takayuki Miyoshi, Mises à jour auto désactivées
Depicter: version: 3.6.1, author: Depicter Slider and Popup by Averta, Mises à jour auto désactivées
Elementor: version: 3.27.2, author: Elementor.com (latest version: 3.27.3), Mises à jour auto désactivées
Elementor Pro: version: 3.27.1, author: Elementor.com, Mises à jour auto désactivées
FiboSearch - AJAX Search for WooCommerce: version: 1.30.0, author: FiboSearch Team, Mises à jour auto désactivées
Health Check & Troubleshooting: version: 1.7.1, author: The www.ads-software.com community, Mises à jour auto désactivées
LiteSpeed Cache: version: 6.5.4, author: LiteSpeed Technologies, Mises à jour auto activées
MC4WP: Mailchimp for WordPress: version: 4.10.1, author: ibericode, Mises à jour auto désactivées
Ovic: Import Demo: version: 1.6.3, author: Ovic Team, Mises à jour auto désactivées
Ovic: Product Bundle: version: 1.1.2, author: Ovic Team, Mises à jour auto désactivées
Ovic Addon Toolkit: version: 2.6.0, author: Ovic Team, Mises à jour auto désactivées
Rank Math SEO: version: 1.0.237, author: Rank Math SEO, Mises à jour auto désactivées
Solid Security Basic: version: 9.3.6, author: SolidWP, Mises à jour auto désactivées
WCFM - WooCommerce Frontend Manager: version: 6.7.15, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Frontend Manager - Analytics: version: 2.2.5, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Frontend Manager - Delivery: version: 1.3.1, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Frontend Manager - Groups & Staffs: version: 3.4.10, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Frontend Manager - Ultimate: version: 6.7.5, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Multivendor Marketplace: version: 3.6.13, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Multivendor Marketplace - Elementor: version: 3.0.4, author: WC Lovers, Mises à jour auto désactivées
WCFM - WooCommerce Multivendor Membership: version: 2.11.6, author: WC Lovers, Mises à jour auto désactivées
WooCommerce: version: 9.6.1, author: Automattic, Mises à jour auto désactivées
WP Activity Log: version: 5.2.2, author: Melapress, Mises à jour auto désactivées
WP Crontrol: version: 1.18.0, author: John Blackbourn, Mises à jour auto désactivées

Now I’ve set a staging website to test different possibilities without affectiong the live website, I’ll get back to you once I’ve done that.