abwaita a11n

Glad to hear that you found where to change the sender’s email address!

I’ll mark this thread as resolved now. If you have any other questions, please feel free to create a new thread.

Thanks for getting back.

Thanks for the screenshot. While the email looks hashed on the console, it might not be indicative that on the backend, WooCommerce is using the hashed email address.
As mentioned in the above reply, it could even be another tool adding that hashed part on the console. On my test site, when I place an order, the console does not show any email at all. So, explore further by checking the source of that console log find out the tool adding it.

Further, I would suggest trying to do a conflict test to see if you can narrow down to the tool. You’ll want to deactivate ALL plugins apart from WooCommerce and switch to the Twenty Twenty-One theme and do a test order with BACS or Cash on Delivery payment options. Try enabling the other tools and checking if the email hashing returns.

Additionally, when you check on WP Mail Catcher, do the recipient email addresses appear okay or hashed?

Thanks.

Thanks for getting back @bladmin.

You mentioned that using WPBakery ver 5.4.5 works well and that the issue starts with ver 6.7.

If possible, kindly do a conflict test to see if this issue still persists when you switch entirely to a different theme like Twenty Twenty-One. If checkout works well with another theme, then you will know that the issue is on the WPBakery side.

As it looks with the info at hand, some code in WPBakery ver 6.7 is conflicting with WooCommerce when you try to check out. Thus, they would be in a better place to check what changed between the versions 5.4.5 and 6.7 that causes this conflict to happen.

I hope this helps.
Thanks.

Hi,
We’ve not heard back from you in a while, so I’m marking this thread as resolved. Hopefully, the above info was helpful and you were able to find a solution to the issue.

If you have further questions, please feel free to open a new topic.

Thanks.

Hi,
We’ve not heard back from you in a while, so I’m marking this thread as resolved. Hopefully, you were able to find a solution to the issue.

If you have further questions, please feel free to open a new topic.

Thanks.

Hi @hkwatermark,

Thanks a lot for the SSR. I can only recommend that you upgrade to the latest WP version.

For the suspicious card fields, there are some workarounds shared in this guide that could help out – https://magento.stackexchange.com/questions/330122/hack-in-magento-2-payment.

You mentioned:

2) reinstall woocommerce => not solved

Just to check, when you do a clean reinstallation of WooCommerce, is it that the suspicious fields continue to show or come back after a while?

Since the file that the malware seems to target is wp-content/plugins/woocommerce/templates/checkout/form-checkout.php, I would think that a clean reinstallation could resolve the issue.

Just to add, you will want to get in touch with your site’s host regarding the issue so that they can look into the security of your files. On your end, you could try looking around for other security plugins. Here’s an article with a few security plugin suggestions – https://blogvault.net/wordpress-malware-removal-plugins/.

Thanks.

Hi @tasdid321,

As the question touches on our paid WooCommerce Brands extension, please contact us at WooCommerce.com > My Account > Support. You may login to your WooCommerce account before you can access that page.

We will be able to help you further there.
Thanks.

Hi @kenchliu,

I tried the same change on my site and it seems that this behavior is expected. Even with a different WP date format setting, the coupon expiry date field follows the universal YYYY-MM-DD format.

Since there’s no inbuilt option for changing the format, you could use custom code to modify it. I would recommend consulting with the WooCommerce Customizations Partners for assistance with custom coding.

Thanks.