AhaPay Buy Now Pay Later Security & Risk Analysis

wordpress.org/plugins/ahapay-buy-now-pay-later

AhaPay Buy Now Pay Later AhaPay is a Buy Now Pay Later (BNPL) payment solution that enables customers to split their purchases into installments with …

10 active installs v1.0.3 PHP + WP + Updated Dec 23, 2025
ahapaybnplbuy-now-pay-laterpayment-gatewaywoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is AhaPay Buy Now Pay Later Safe to Use in 2026?

Generally Safe

Score 100/100

AhaPay Buy Now Pay Later has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "ahapay-buy-now-pay-later" plugin version 1.0.3 demonstrates a generally strong security posture based on the provided static analysis. It effectively implements many WordPress security best practices, including 100% proper output escaping and 100% use of prepared statements for SQL queries. The plugin also utilizes nonce checks and capability checks on its entry points, which is a positive indicator. Furthermore, the complete absence of known vulnerabilities (CVEs) and a clean taint analysis with no unsanitized paths or critical/high severity flows suggest that the code is well-written and less prone to common web application attacks.

Vulnerabilities
None known

AhaPay Buy Now Pay Later Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

AhaPay Buy Now Pay Later Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
61 escaped
Nonce Checks
3
Capability Checks
2
File Operations
0
External Requests
4
Bundled Libraries
0

Output Escaping

100% escaped61 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
ahapaybuynowpaylater_handle_api_call (payment-gateway.php:458)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

AhaPay Buy Now Pay Later Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 1

authwp_ajax_ahapaybuynowpaylater_call_apipayment-gateway.php:124

REST API Routes 2

POST/wp-json/ahapaybuynowpaylater/v1/callbackincludes\class-ahapay-callback-handler.php:53
GET/wp-json/ahapaybuynowpaylater/v1/check-order-status/(?P<order_id>\d+)payment-gateway.php:531
WordPress Hooks 25
actionrest_api_initincludes\class-ahapay-callback-handler.php:45
actionadmin_enqueue_scriptsincludes\class-ahapay-gateway.php:162
actionwp_enqueue_scriptsincludes\class-ahapay-gateway.php:164
actionwoocommerce_blocks_loadedincludes\class-ahapay-gateway.php:175
actionwoocommerce_blocks_payment_method_type_registrationincludes\class-ahapay-gateway.php:822
actionplugins_loadedpayment-gateway.php:62
filterwoocommerce_payment_gatewayspayment-gateway.php:96
actioninitpayment-gateway.php:99
actionwp_enqueue_scriptspayment-gateway.php:102
actionwp_enqueue_scriptspayment-gateway.php:103
actionwp_enqueue_scriptspayment-gateway.php:106
actionadmin_enqueue_scriptspayment-gateway.php:109
actionwoocommerce_before_checkout_formpayment-gateway.php:115
actionwoocommerce_single_product_summarypayment-gateway.php:118
actionwoocommerce_single_product_summarypayment-gateway.php:119
actionwoocommerce_single_product_summarypayment-gateway.php:120
actionwoocommerce_after_shop_loop_item_titlepayment-gateway.php:121
actionwoocommerce_admin_order_data_after_order_detailspayment-gateway.php:127
actionbefore_woocommerce_initpayment-gateway.php:130
filterwoocommerce_blocks_payment_method_datapayment-gateway.php:131
actionenqueue_block_assetspayment-gateway.php:132
actionwp_enqueue_scriptspayment-gateway.php:133
actionadmin_noticespayment-gateway.php:154
actionrest_api_initpayment-gateway.php:530
filterrest_pre_serve_requestpayment-gateway.php:547
Maintenance & Trust

AhaPay Buy Now Pay Later Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedDec 23, 2025
PHP min version
Downloads350

Community Trust

Rating0/100
Number of ratings0
Active installs10
Developer Profile

AhaPay Buy Now Pay Later Developer Profile

AhaPay - Buy Now Pay Later

1 plugin · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect AhaPay Buy Now Pay Later

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ahapay-buy-now-pay-later/assets/css/ahapaybuynowpaylater-block-style.css/wp-content/plugins/ahapay-buy-now-pay-later/assets/css/ahapaybuynowpaylater-frontend.css/wp-content/plugins/ahapay-buy-now-pay-later/assets/js/ahapaybuynowpaylater-frontend.js/wp-content/plugins/ahapay-buy-now-pay-later/assets/js/ahapaybuynowpaylater-modal.js
Script Paths
/wp-content/plugins/ahapay-buy-now-pay-later/assets/js/ahapaybuynowpaylater-frontend.js/wp-content/plugins/ahapay-buy-now-pay-later/assets/js/ahapaybuynowpaylater-modal.js
Version Parameters
ahapay-buy-now-pay-later/assets/css/ahapaybuynowpaylater-block-style.css?ver=ahapay-buy-now-pay-later/assets/css/ahapaybuynowpaylater-frontend.css?ver=ahapay-buy-now-pay-later/assets/js/ahapaybuynowpaylater-frontend.js?ver=ahapay-buy-now-pay-later/assets/js/ahapaybuynowpaylater-modal.js?ver=

HTML / DOM Fingerprints

CSS Classes
ahapay-bnpl-termsahapay-bnpl-modal-wrapper
HTML Comments
<!-- AhaPay BNPL modal wrapper --><!-- AhaPay BNPL terms and conditions --><!-- AhaPay BNPL button -->
Data Attributes
data-ahapay-modal-trigger
JS Globals
ahapay_frontend_params
FAQ

Frequently Asked Questions about AhaPay Buy Now Pay Later