My client is planning to use the WooCommerce Square plugin on their e-commerce site. However, the CVV field is not masked, and the security code is visible in plain text when entered. This raises concerns with their security policies, as it does not follow standard practices for handling sensitive payment information.
I have reviewed the discussion in this forum thread (Square Payment CVV Password Character means CVV not Hide), but I would appreciate further clarification. Could you please explain if the current behavior of displaying the CVV in plain text is intentional, and how this complies with PCI DSS requirements?
Any guidance on how to resolve this issue would also be greatly appreciated.
