I have recently been hacked through PayPal and have had to replace three credit cards because of it. Some scofflaw is trying to purchase through my account, and although my banks are on it, they keep trying. At this point, I am removing all my cards at PayPal's site and will use other means to pay for items.
It's very frustrating, primarily because PP has not acknowledged these attempts--my banks have caught the error. In addition, PP held onto a sum of money for an order that was canceled almost immediately. (A two-month ordeal of emailing them and explaining to an AI bot). It took a complaint I filed with the BBB to rectify this charge.
So, beware of these automatic pay sites.