tcdigital

Same issue on roughly 1/5 of orders. We are using Germanized for Woocommerce which also adds custom Checkboxes to checkout (if that is indeed the problem).

Support told me they are aware of the issue. They’ve been aware for a year.

Replying via support and then doing nothing is not actual support.

Advanced Custom Fields
All In One WP Security
Borlabs Cookie - Cookie Opt-in
Duplicate Page
Duplicator Pro
Ele Custom Skin
Elementor
Elementor Pro
HubSpot All-In-One Marketing - Forms, Popups, Live Chat
Imagify
Intuitive Custom Post Order
LeadBooster Chatbot by Pipedrive
Newsletter, SMTP, Email marketing and Subscribe forms by Sendinblue
Pixel Cat Business
Polylang Connect for Elementor
Polylang Pro
ProfilePress
Rank Math SEO
Redirection
Template Kit Import
Toolset Types
Unlimited Elements for Elementor (Premium)
User Role Editor
WordPress Popular Posts
WP Mail SMTP
WP OPcache
WP Rocket

This is the list of plugins. Is one of these classified as SEO by your plugin?

@mllapan

Could you share your plugin list for the affected sites? Or do you know which plugin might’ve been the cause.

We’ve seen an attack leading to the same spam popup and are wondering about the attack vector.

This can be resolved by setting the product as “downloadable” which still confuses me, since it worked fine last week without this setting.

I managed to extract the id from the order notes.

The code is specific to “Advanced Order Export For WooCommerce” but could easily be adapted for other use cases. This one goes into the child theme functions.php

Maybe this code helps someone with the same issue in the future.

// Modify order notes for transaction id export
add_filter('woe_get_order_value_order_notes',function ($value, $order,$fieldname) {
	global $wpdb;

	$table_prefixed = $wpdb->prefix . 'comments';
    $results = $wpdb->get_results("SELECT * FROM $table_prefixed WHERE comment_post_ID = {$order->id} AND comment_type LIKE 'order_note'");
	
    $value = "";
	
	$paypal_plus_string = "PayPal PLUS-Zahlung genehmigt! Transaktions-ID: ";

    foreach($results as $note){
		if (strpos($note->comment_content, $paypal_plus_string) !== false) {
			$value .= str_replace($paypal_plus_string, "", $note->comment_content);	
		}
    }
	
    return $value;
},10,3);

Thanks for the quick reply, the new filter could be really useful.

Im going to try out an empty payment method, too.

For the time being I’m using the woocommerce_email_recipient filter, which seems to work as well.

add_filter( 'woocommerce_email_recipient_customer_paid_for_order', 'override_disable_customer_order_email_if_free', 10, 2 );
function override_disable_customer_order_email_if_free( $recipient, $order ) {
    $page = $_GET['page'] = isset( $_GET['page'] ) ? $_GET['page'] : '';
    if ( 'wc-settings' === $page ) {
        return $recipient;
    }

    $order_total = floatval($order->get_total());
    if ($order_total == 0) {
        return "";
    }

    return $recipient;
}