WooCommerce payment email changed

  • Resolved Nick B.

    (@dok_h)


    5 years, 10 months ago

    Hi, I found out that PayPal email (from PayPal settings) is changed. The site is regularly updated and has only a few well known plugins and well known theme, so I can only suspect on poor hosting or hacked webmail (since login credentials are in the email). Also, no scan (with security plugin or online tools like sucuri) didn’t find anything.

    How can I prevent this in the future? Can “Address override” option under Payments help with that?

    Any other additional advice would be welcomed.

    Thanks

    • This topic was modified 5 years, 10 months ago by Nick B..
Viewing 3 replies - 1 through 3 (of 3 total)
  • Zach W

    (@dynamiczach)

    Automattic Happiness Engineer

    Howdy!

    I found out that PayPal email (from PayPal settings) is changed.

    What was it changed to? Was it a staff member’s mistake, or was it actually changed to a different email that you have no access to?

    If it was changed to an email you have no access to and payments were being funneled away from your account, I’d recommend contacting your hosting provider and having them help you with this.

    The information here is also helpful:

    https://www.codeinwp.com/blog/secure-your-wordpress-website/

    Thread Starter Nick B.

    (@dok_h)

    Someone actually changed email and payment has gone to that email. Fortunately, it was sorted out with PayPal and email is reported.

    I know all these security tricks, most of them are actually implemented. That is why I suspect on hosting. I even have this audit plugin (which doesn’t show any log in from the last time I was logged in and yet email is changed).

    I am asking specifically about WooCommerce here. Is there a way to get notified when this email is changed? Does checking “Address override” option do this?

    Thanks

    • This reply was modified 5 years, 10 months ago by Nick B..
    Zach W

    (@dynamiczach)

    Automattic Happiness Engineer

    Howdy!

    I am asking specifically about WooCommerce here. Is there a way to get notified when this email is changed? Does checking “Address override” option do this?

    No, there isn’t currently a way to do this without custom development. WooCommerce assumes that anyone changing the email address is meant to. Securing and protecting your site is the best way to keep this from happening again.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘WooCommerce payment email changed’ is closed to new replies.

Tags