CVC allows declined payments

  • Resolved Halfhidden

    (@halfhidden)


    4 years, 3 months ago

    Recently noticed that when customers put in a false CVC number at the payment gateway with Square the gateway accepts the incorrect details and passes instructions to Woocommerce to say the payment was approved and goods are released, but in fact the payment had failed.
    I have replicated this and this needs an urgent fix.

    • This topic was modified 4 years, 3 months ago by Halfhidden.
Viewing 5 replies - 1 through 5 (of 5 total)

  • Hi there @halfhidden,

    Thanks for reaching out!

    I tried Square in Sandbox mode and it didn’t allow me to complete a payment with the wrong CVV number:


    Link to image: https://d.pr/i/89p975

    Please contact us at WooCommerce.com > My Account > Support. You may need to create an account before you can access that page.

    Please include a link to this forum thread, so that we can keep track of what’s already been done.

    We will be able to help you further there.

    Thread Starter Halfhidden

    (@halfhidden)

    Thanks for the reply Elvira, but I’m not having any problem replicating this. I simply add the wrong CVC and the a receipt is generated through Woocommerce saying that the item is paid for. Square does NOT take payment, and the customer is told that the payment has gone through.
    Normally, the customer would have a fail at the wrong CVC and then redirected to a payment failed page.

    I have no problem replicating this on a live system.
    We are now starting an audit as we may well have lost hundreds, if not a thew thousand through this bug.

    Hi there @halfhidden,

    Thanks for getting back to us!

    Can you please open a ticket with us per my previous comment? We’d like to take a look at the back-end of your site.

    Cheers!

    Hi there @halfhidden,

    We haven’t heard back from you in a while, so I’m going to mark this as resolved – if you have any further questions, you can start a new thread.

    Thread Starter Halfhidden

    (@halfhidden)

    Sorry for the delay in getting back to you.
    After a lot of effort I tracked down the issue to a plugin that is a requirement for shop functionality (WooFood) and I wasn’t able to disable this plugin to test it as it is deeply in-bedded in the woocommerce functionality.
    I have contacted the author who has published a fix with version 2.5.7

Viewing 5 replies - 1 through 5 (of 5 total)
  • The topic ‘CVC allows declined payments’ is closed to new replies.