Guides · Incident response

WooCommerce security guides for high-pressure moments.

Operational runbooks for identifying checkout abuse, preserving evidence, containing payment attempts, and verifying recovery.

Published guides

Incident responseReviewed July 30, 2026

WooCommerce card-testing attack: what to do in the next 15 minutes

Confirm the pattern, preserve evidence, escalate to the processor, contain the targeted checkout path, handle suspicious payments, and verify legitimate checkout.

Open the runbook →

Version 1.0 · Preparing for submission

Put a control between checkout abuse and your payment gateway.

The qualified 1.0.0 candidate is being prepared for WordPress.org. No public download or paid checkout is live yet.

View public source Attack in progress? Start here →