Halfhidden

Sorry for the delay in getting back to you.
After a lot of effort I tracked down the issue to a plugin that is a requirement for shop functionality (WooFood) and I wasn’t able to disable this plugin to test it as it is deeply in-bedded in the woocommerce functionality.
I have contacted the author who has published a fix with version 2.5.7

Thanks for the reply Elvira, but I’m not having any problem replicating this. I simply add the wrong CVC and the a receipt is generated through Woocommerce saying that the item is paid for. Square does NOT take payment, and the customer is told that the payment has gone through.
Normally, the customer would have a fail at the wrong CVC and then redirected to a payment failed page.

I have no problem replicating this on a live system.
We are now starting an audit as we may well have lost hundreds, if not a thew thousand through this bug.

Is this the same problem as we have? If a cvc is entered incorrectly through Square the payment gateway tells Woocommerce that the payment is fine and to release the goods even though the payment has actually failed.

Yes the wp-config file is corrupt. I fixed this by changing the public directory to 777 (from 750) then allowed WordPress to create it’s own WP-Config file and then changed the directory back to 750.
I’ve found this happens every time I move a wordpress site from one place to another.