• minosta

    (@minosta)


    This plugin has caused us to lose more than $3,700 due to vulnerabilities in its payment system. Scammers can exploit these vulnerabilities to place orders without actually paying, while the system incorrectly marks the orders as paid.When we contacted their support team through Telegram, they refused to reimburse our losses or accept responsibility.They do not deserve our respect.We will contact WordPress support and request the removal of this plugin because of its serious security vulnerabilities.

Viewing 1 replies (of 1 total)
  • Plugin Author Al Monsor

    (@muhitmonsur)

    All payments go directly to the merchant or website owner. Our system checks the blockchain to decide if a payment is correct. If there’s a problem — like the customer paying less than expected — we wait for a certain time so the merchant can contact us and confirm the payment. In this case, the merchant is claiming a problem with a transaction that started on 2026-09-04 at 13:37:18 UTC for $97. At that time, we were waiting to hear back from both the merchant and the customer, but we got no response. Because the merchant didn’t reply, other transactions kept going as normal. Then, two days later, on 2026-09-06 at 14:38:40 UTC, the merchant finally contacted us asking for a refund. But he should have contacted us within a few hours — not two days — so we could stop future payments in time.

    Also, the blockchain shows the payment was successful, even though the merchant says there was some kind of “token problem.” Since crypto payments can’t be reversed, and the merchant receives the money directly, he should contact us right away if there’s an issue.

    Instead, he waited two days, and during that time, he delivered the product to the customer without confirming the payment with us first. This looks very suspicious — if he really didn’t receive the payment, why would he deliver the product without checking with us first, and why wait two days to say something?

Viewing 1 replies (of 1 total)

You must be logged in to reply to this review.