Urgent Security Concern: Exposed Stripe Key on Website
-
Dear Paymatiic Support Team,
I hope this message finds you well. I am writing to urgently address a critical security concern regarding my website, specifically the page at [https://www.alfcoretraining.net/in-person-12-hr-continuing-education/](https://www.alfcoretraining.net/in-person-12-hr-continuing-education/).
I recently received a notification from Stripe alerting me that my Stripe API key is publicly exposed on the aforementioned page. Upon inspecting the source code of the page, I discovered that the Paymatiic JavaScript file is inadvertently exposing this key. This exposure has already had serious repercussions, as evidenced by an attempt to exploit this vulnerability, resulting in approximately 1000 unauthorized $1 transactions.
This is a significant security lapse, and I need your immediate assistance to resolve this issue. It is imperative that we address this exposure as quickly as possible to prevent further unauthorized access and potential financial losses.
Please advise on the steps you are taking to rectify this situation and ensure such exposures do not occur in the future. I am available for a call or further correspondence to expedite this resolution.
Thank you for your prompt attention to this critical matter. I look forward to your immediate response.
Best regards,
JAGDISH SHARMA
The page I need help with: [log in to see the link]
- The topic ‘Urgent Security Concern: Exposed Stripe Key on Website’ is closed to new replies.