Hi, I have read through some forum topics on this subject but they all are kind of old, so I wanted to check if anyone has some insight on what I need to do (a newby WordPress user). I have been receiving ORDER FAILED emails stating that the payment failed. These are obviously spam orders and they are using all kinds of billing and shipping addresses. I suppose the saving grace is that the orders haven’t processed. I am at a loss to know what is being done and how to protect my website. I have done the following things to get rid of the info:
1. I have gone to the WordPress dashboard -> Users -> All Users and deleted the customers from there (it appears everyone who has tried to order is in there regardless of whether they tried to register or buy as a guest is in there, is that right?
2. I have gone to Woocommerce -> Orders and deleted the orders from there (they showed a 0 order amount). It appears that there is only one ‘registered date’ for the spam orders, the rest have no registered date.
3. I am also trying to remove the ‘Customers’ from Woocommerce -> Customers but there doesn’t seem to be a delete option which is totally stupid. How do you get rid of them?
I still want people to be able to place an order without setting up an account so that is not a ‘fix’ for me. I have gone to WordPress ->Settings -> General and ‘Anyone can register’ is unchecked which I know is seperate to Woocommerce but I read in a forum to make sure it was.
So now the big question. What do I need to do to stop this crap from happening? I don’t want to get plugins that do the same thing so is it an anti-spam, firewall or security thing I need? I am so confused.. 🫤 Any help would be much appreciated. I never had this issue with my Weebly/Square site so maybe something is wrong with WordPress/Woocommerce?
kind regards Robyn