10.6.0
-
The latest Stripe plugin update (10.6.0) is double charging every single subscription renewal. Every customer with a recurring payment is being billed twice. This is not an edge case — it is happening on every renewal without exception.
Our site auto-updated from 10.5.3 to 10.6.0 this morning. Within an hour, customers started getting double charged. We had to emergency-deactivate WooCommerce Subscriptions to stop the bleeding, manually refund over a dozen customers, and eat the Stripe processing fees on every duplicate charge.
We traced it through Stripe’s API logs. For every renewal, two separate payment intents are being created 3-5 seconds apart with different idempotency keys. The Stripe webhook is arriving between the two and triggering a second payment before the first one finishes processing. Rolling back to 10.5.3 immediately fixed the problem.
This is directly related to the race condition reported in your GitHub issues #3568 and #5042 — the order locking fix you shipped in 9.6.0 does not cover the subscription renewal path.
What is also concerning is why does it say say her eon ww.wp.xz.cn that 10.5.3 is the latest version, when 10.6.0 is what’s actually the latest version (and listed on the WooCommerce ) ? That means other stores with WooCommerce Subscriptions are potentially updating this and may also be silently double charging their customers. After rolling back to 10.5.3 the issue was resolved.
There are few bugs bug serious than charging customers twice!
You must be logged in to reply to this topic.