Suddenly unable to process refunds

Having same problem. Did you find a solution?

Solved. Mine was a problem with Woo Shipping & Tax plugin. They are going to provide an update with a fix soon. Hopes this info helps someone!

@macdoodle – Thank you!

Hi there @ayrstone

Can you please walk us through the steps you took to encounter the problem and some screenshots of the issue? You may use https://snipboard.io when sharing screenshots. Please follow the instructions on the page, then paste the URL in your reply.

Please also confirm if the issue happens on a different browser or device.

In the meantime, I also recommend navigating to WooCommerce → Status → Tools, and do the following to see if this makes any difference:

• WooCommerce transients – Clear
• Expired transients – Clear
• Clear template cache – Clear

Also, please share a copy of your site’s System Status Report so that we can better understand your site’s current environment.

• System Status Report: navigate to WooCommerce → Status → select Get system report and then Download for support. This will download a TXT file that has the contents of the SSR to share with us.

Apologies – I did finally find the problem (sort of) and fixed it. What happened is that I have the “Backup Migration” and “Backup Migration Pro” plugins. Out of an abundance of suspicion, I checked the Apache logs on my server and saw a lot of suspicious incoming traffic from “https://api.backupbliss.com”

I did a little investigation and discovered the “Backupbliss” had purchased these plugins from the original developers. The incoming traffic indicated that they may have backdoors, so I disabled both the plugins as a security risk. Incidentally, I was immediately able to do refunds and add notes to orders (another bit that was broken) again.

So – yet another reminder to keep an eyes on your plugins, because they can change…

Oh, and @aguinaldodarla – good suggestions all, and I had done that before I grew even more suspicious.

Hi @ayrstone

Oh, and @aguinaldodarla – good suggestions all, and I had done that before I grew even more suspicious.

You did well, and we appreciate your efforts and vigilance, in identifying a potential security risk and taking immediate action to mitigate it.

WooCommerce is a plugin for WordPress and operates at the application level, not the server level, so if you want to take such traffic management to a certain level, you can discuss this with your hosting provider. They should be able to assist you in setting up a firewall rule to block traffic from the specified URL.

I hope this information is helpful! ??

I’m going to mark this thread as resolved, but please don’t hesitate to start a new topic if you have any more questions down the line.

Have a fantastic day!