BlockBolt Payments Security & Risk Analysis

wordpress.org/plugins/blockbolt-payments

Integrate BlockBolt for secure, efficient multi-blockchain crypto payments in your WooCommerce store.

0 active installs v1.0.2 PHP 7.4+ WP 6.6+ Updated May 9, 2025
blockboltcrypto-paymentcryptocurrencypayment-gatewaywoocommerce
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is BlockBolt Payments Safe to Use in 2026?

Generally Safe

Score 92/100

BlockBolt Payments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The blockbolt-payments plugin v1.0.2 exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and properly escaping 99% of its outputs. It also shows no history of recorded vulnerabilities, which is a strong indicator of a well-maintained codebase to date. However, a significant concern lies in its attack surface. The plugin exposes two AJAX handlers without any authentication checks, presenting a clear pathway for unauthenticated attackers to potentially interact with sensitive functionalities. The taint analysis, while not revealing critical or high-severity issues, did identify two flows with unsanitized paths, suggesting a need for more robust input validation, especially in light of the unprotected AJAX endpoints.

Key Concerns

  • Unprotected AJAX handlers
  • Taint flows with unsanitized paths
Vulnerabilities
None known

BlockBolt Payments Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

BlockBolt Payments Release Timeline

v1.0.2Current
v1.0.1
v1.0.0
Code Analysis
Analyzed Mar 17, 2026

BlockBolt Payments Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
99 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
3
Bundled Libraries
0

Output Escaping

100% escaped99 total outputs
Data Flows · Security
2 unsanitized

Data Flow Analysis

2 flows2 with unsanitized paths
bbp_handle_callback_response (includes\class-blockbolt-payments-gateway.php:234)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
2 unprotected

BlockBolt Payments Attack Surface

Entry Points2
Unprotected2

AJAX Handlers 2

authwp_ajax_bbp_verify_keyadmin\class-blockbolt-payments-admin.php:69
noprivwp_ajax_bbp_verify_keyadmin\class-blockbolt-payments-admin.php:70
WordPress Hooks 15
actionadmin_enqueue_scriptsadmin\class-blockbolt-payments-admin.php:60
actionadmin_enqueue_scriptsadmin\class-blockbolt-payments-admin.php:61
actionplugins_loadedadmin\class-blockbolt-payments-admin.php:67
actionwoocommerce_admin_order_data_after_order_detailsadmin\class-blockbolt-payments-admin.php:73
actionadmin_noticesadmin\class-blockbolt-payments-admin.php:134
actionwoocommerce_api_blockbolt_payments_callbackincludes\class-blockbolt-payments-gateway.php:40
actionwoocommerce_api_blockbolt_payments_cancelincludes\class-blockbolt-payments-gateway.php:41
actionplugins_loadedincludes\class-blockbolt-payments.php:107
actionbefore_woocommerce_initincludes\class-blockbolt-payments.php:108
actionwoocommerce_blocks_loadedincludes\class-blockbolt-payments.php:109
filterwoocommerce_payment_gatewaysincludes\class-blockbolt-payments.php:148
actionwoocommerce_blocks_payment_method_type_registrationincludes\class-blockbolt-payments.php:161
actionwp_enqueue_scriptspublic\class-blockbolt-payments-public.php:60
actionwp_enqueue_scriptspublic\class-blockbolt-payments-public.php:61
actionwoocommerce_order_details_after_order_tablepublic\class-blockbolt-payments-public.php:63
Maintenance & Trust

BlockBolt Payments Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedMay 9, 2025
PHP min version7.4
Downloads492

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

BlockBolt Payments Developer Profile

Blockbolt

1 plugin · 0 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect BlockBolt Payments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/blockbolt-payments/admin/css/blockbolt-payments-admin.css/wp-content/plugins/blockbolt-payments/admin/js/blockbolt-payments-admin.js/wp-content/plugins/blockbolt-payments/public/css/blockbolt-payments-public.css/wp-content/plugins/blockbolt-payments/public/js/blockbolt-payments-public.js
Script Paths
/wp-content/plugins/blockbolt-payments/admin/js/blockbolt-payments-admin.js/wp-content/plugins/blockbolt-payments/public/js/blockbolt-payments-public.js
Version Parameters
blockbolt-payments-admin.css?ver=blockbolt-payments-admin.js?ver=blockbolt-payments-public.css?ver=blockbolt-payments-public.js?ver=

HTML / DOM Fingerprints

CSS Classes
blockbolt-payment-gateway-fieldblockbolt-payment-gateway-inputblockbolt-payment-gateway-labelblockbolt-payment-gateway-sectionblockbolt-gateway-labelblockbolt-gateway-input
HTML Comments
<!-- BlockBolt Payments Settings --><!-- BlockBolt Payment Gateway Settings -->
Data Attributes
data-blockbolt-payment-tokendata-blockbolt-payment-amountdata-blockbolt-payment-currency
JS Globals
blockbolt_payment_params
REST Endpoints
/wp-json/blockbolt/v1/process_payment
FAQ

Frequently Asked Questions about BlockBolt Payments