Having this same issue. It’s definitely the plugin. Spoke to Stripe. I had 4,000 fraudulent card testing orders go through this plugin in one night. I “made” thousands of dollars in charges that were fraud. Now I’m on the hook for refund fees, chargebacks, and disputes. I’m out a ton of money and time. And my shop’s reputation is trashed.
This has happened multiple times over the last few months, but no actual charges ever went through until last night. Usually they were all blocked. But this time, I actually got hundreds of completed orders and money into my account that I now have to deal with and pay for.
Stripe confirmed it was my integration with this plugin. The second I disabled the plugin, the emails and fraud orders stopped.
This is a HUGE PROBLEM.