{"id":14900720,"date":"2021-09-23T08:32:02","date_gmt":"2021-09-23T08:32:02","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/card-testing-attack\/"},"modified":"2021-09-23T08:32:02","modified_gmt":"2021-09-23T08:32:02","slug":"card-testing-attack","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/card-testing-attack\/","title":{"rendered":"Card testing attack"},"content":{"rendered":"<p>I run the Stripe Payments plugin.  Over the past 18 hours I have had 60,000 card testing attempts at making payments, around 300 of which have succeeded.  Stripe support advised refunding these immediately, which I am doing.<\/p>\n<p>But each attempt results in either a success email from WordPress, or an Error email from WordPress, so I have had 60,000 emails in the past 18 hours.<\/p>\n<p>In the plugin settings I have reCaptcha enabled, and the box to have error emails sent to me is not checked.  But all of these emails are still arriving.<\/p>\n<p>All 60,000 attempts are for the same product, which does not exist, so this is clearly not going through the product form on my web site.<\/p>\n<p>Can you advise urgently please?<\/p>\n","protected":false},"template":"","class_list":["post-14900720","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/14900720","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/14900720\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=14900720"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}