SiteBites
Forum Replies Created
-
Hi @shanedelierrr ,
I figured out the issue – it was a plugin called “WP Logo Showcase Responsive Slider and Carousel” – prior to their version 3.8.7; they had a code conflict affecting widget saving.
Once I updated that plugin to 3.8.7; everything was working fine.
I thought it might be useful to know if anyone else has a similar issue.
Hi @shanedelierrr ,
The REST HTTP methods are enabled – as we have multiple sites on the same server with this plugin that are all working fine.
Coincidentally; admins are getting the “Daily Security Digest” emails from Solid Security on this site – but I cannot configure/setup the plugin at all.
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi @lovingbro,
Thank you for the detailed explanation — the clarification about how a stale total can cause WooCommerce to bypass required checkout fields is helpful. We’ll begin implementing the safeguards you’ve recommended.
Before proceeding, could you please provide:
1. The recommended validation snippet
Specifically, we need:
- A snippet that blocks all unintended £0 orders only when no coupon or gift card has been applied.
- The correct WooCommerce hooks for WooCommerce v10.1+.
- Confirmation that this snippet will not interfere with legitimate £0 scenarios (e.g., when using the official WooCommerce Gift Cards plugin which may bring totals to £0).
We want to ensure we apply the snippet exactly as intended and avoid writing something that unintentionally blocks valid gift-card redemptions or future functionality.
2. Clarification on how the currency switcher might cause validation to be skipped
Your explanation makes sense, but to better understand how the user bypassed required fields entirely, could you clarify:
- Does WooCommerce skip all field validation automatically when the cart total is 0 at the
process_checkout()stage? - Is this behaviour expected, or is it something WooCommerce may consider tightening in future versions?
3. Any recommended logging for catching this earlier
Is there a hook we can log that fires before WooCommerce decides the checkout is free?
We already have cart-session logging in place, but if you can suggest an earlier or more specific action, we will implement it.Once we have the validated snippet and your clarification, we’ll move ahead with the fixes on staging before deploying the changes live.
Thanks again for your ongoing help — we appreciate it.
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi @mosesmedh,
This has been the second instance of this issue (the first was the one I reported on this thread last month).
Do you have any solution to ensure that if an order has a £0 value (an no coupons/gift cards have been used) that the status does not change to Processing. That, as I mentioned, is our main concern.
Thank you
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi @shahzeenfarooq ,
Thanks for your reply.
- Here’s the full screenshot of the order details
- Screenshot of order notes for that order
- Here’s the System Status Report
- There were no fatal errors for that order
As we cannot replicate this issue; my main concern is ensuring these orders do not go to Processing – as it then interferes with the stock system (and do not want people to think they have bought something!)
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi @thelmachido,
Just to let you know; this issue occurred once more on our site – again the customer was not registered and the checkout value ws £0 as well as the order status being set to Processing.
This time, the customer did not even complete all the required fields as mobile, email and shipping details were all missing.
I also checked all logs we have and it seems like WooCommerce has not picked it up (as it doesn’t seem to be a true checkout event) – what information do you need from me to investigate this further?
Is there any other safeguards we can apply to ensure orders like this do not go to processing?
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi @lovingbro,
Thanks for getting back to us — much appreciated.
To answer your questions:
- The affected order was placed by an actual customer, not a test order.
- It has not occurred again since that incident.
- There is no custom code or snippet on the site that modifies cart totals, fees, or discounts.
- The site does use the official WooCommerce Gift Cards extension, though it was not used for the affected order.
- The site runs on WPEngine with NitroPack enabled for caching.
- We checked the logs from that period — there were no PHP errors or WooCommerce log entries at the time of the order.
Extensions that interact with pricing/totals include:
- WooCommerce Gift Cards (official plugin)
- Currency Switcher for WooCommerce
All plugins, including WooCommerce and PayPal Payments, have since been updated to their latest versions on Monday, but as the incident has not been reproducible, we’re still unsure what led to it originally.
We’d appreciate any insight into what core conditions could allow a non-zero product to process as a £0 order without a gateway being triggered. Our goal is to ensure that this cannot happen again, even as an edge case.
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi,
Thank you for your response.
To clarify — for the affected order, no payment gateway was triggered at all. The order total changed to £0 at checkout and the system marked it as Processing without calling any payment gateway or logging any transaction. We have cross-checked this order across all active payment gateways on the site, and it does not exist in any of their logs.
As this issue only occurred once and has not been reproducible, simply updating plugins does not give us confidence that the root cause has been addressed — especially since we don’t know why that order skipped the payment step entirely.
Our concern is that this could happen again without detection. We are trying to understand:
- In what scenario WooCommerce would allow checkout to complete at £0 without a coupon, gift card or manual admin adjustment.
- Whether WooCommerce has any internal safeguards to prevent a non-zero cart from completing as a £0 paid order.
We’re happy to update plugins, but we’d really appreciate insight into how this could happen under WooCommerce core logic so that we can put preventative checks in place.
Looking forward to your guidance — we want to ensure this does not happen again.
Forum: Plugins
In reply to: [WooCommerce] Guest Checkout Allowing Product to Process as £0 OrderHi @shahzeenfarooq,
Thanks for your reply.
- Here’s the full screenshot of the order details
- This was the first £0 order we have encountered – nothing like this has occurred before or since
- Here’s the System Status Report
Thank you
Hi Krystian,
Just to confirm, I have sent over the logs via the support portal privately.
Looking forward to hearing back from you.
Thanks
Forum: Plugins
In reply to: [WP Activity Log] Multisite with Woocommerce fatalsWe also experienced the same Fatal error and same scenario, where we have a multi-site with WooCommerce and not all the sub-sites have WooCommerce active.
We’ll await the plugin to be patched too and would appreciate an ETA.
Forum: Plugins
In reply to: [Currency Switcher for WooCommerce] Reflected Cross-Site ScriptingHi @megan891 ,
According to Patchstack, there is “No official fix available” see here. This is still coming up as vulnerable even within WPEngine.
Can you confirm this has indeed been pathed?
Forum: Plugins
In reply to: [Independent Analytics - WordPress Analytics Plugin] Update in progressHi @bensibley
We are also experiencing the same issue – I have also tried deactivating and reactivating the plugin but the issue remains.
I have also emailed “[email protected]”.
Hi Pepe,
Many thanks for your email
See status here: https://paste.mozilla.org/jn9bywnT
If you need anything else, please let us know
Looking forward to hearing from you!
Hi,
Many thanks for sending those instructions.
When we tried to follow the instructions that you sent us to sync the products, the site stopped responding and then we got the following critical error on the site “There has been a critical error on this website. Please check your site admin email inbox for instructions”.
We already spoken with the hosting developers but they can’t see is a server error.
Is there a private way for us to send you the WooCommerce status report?