{"id":19006924,"date":"2026-08-30T21:48:10","date_gmt":"2026-08-30T21:48:10","guid":{"rendered":"https:\/\/wordpress.org\/support\/?post_type=topic&#038;p=19006924"},"modified":"2026-08-30T22:04:27","modified_gmt":"2026-08-30T22:04:27","slug":"attacker-donated-to-poc","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/attacker-donated-to-poc\/","title":{"rendered":"Attacker Donated to PoC"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Had 4 $10 donations today with name &#8220;Attacker&#8221; and email &#8220;a1788102185@example.com&#8221; where the username on the email is a random string beginning with &#8220;a&#8221;. Also the description was &#8220;Donated to\u00a0<strong>PoC<\/strong>&#8221; which i assume is Proof of concept? So this is either a white hat warning me of an exploit or something worse. I updated to latest version, so will that update automatically remove any payloads from the database? Should i delete the create user accounts even though they supposedly have to capabilities? or at least wait until I hear back fro msupport because honestly, this plugin has added over 100 users to my databse since the last update that enabled that b.s. without any way to disable. Honestly going to look for another plugin or just use a direct stripe or paypal link.<\/p>\n","protected":false},"template":"","class_list":["post-19006924","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19006924","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":1,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19006924\/revisions"}],"predecessor-version":[{"id":19006929,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19006924\/revisions\/19006929"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=19006924"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}