BlueSnap Payment Gateway for WooCommerce Security & Risk Analysis

wordpress.org/plugins/bluesnap-payment-gateway-for-woocommerce

Accept cards, ACH, Apple Pay and Google Pay, along with support for WooCommerce Subscriptions and Pre-orders on a global payments gateway.

100 active installs v3.4.1 PHP 8.2+ WP 6.6+ Updated Feb 25, 2026
apple-paybluesnapgatewaypaymentwoocommerce
97
A · Safe
CVEs total1
Unpatched0
Last CVEFeb 13, 2026
Safety Verdict

Is BlueSnap Payment Gateway for WooCommerce Safe to Use in 2026?

Generally Safe

Score 97/100

BlueSnap Payment Gateway for WooCommerce has a strong security track record. Known vulnerabilities have been patched promptly.

1 known CVELast CVE: Feb 13, 2026Updated 1mo ago
Risk Assessment

The 'bluesnap-payment-gateway-for-woocommerce' plugin, version 3.4.1, exhibits a generally strong security posture based on the static analysis. The absence of direct SQL injection vulnerabilities due to the exclusive use of prepared statements and a high percentage of properly escaped output are positive indicators. The limited attack surface with all identified entry points (AJAX handlers and shortcodes) having access control is also a significant strength. However, the presence of one previously recorded high-severity vulnerability, even though currently patched, suggests a past weakness that warrants caution. The single file operation and two external HTTP requests, while not inherently problematic, should be monitored for potential misuse or vulnerabilities in their implementation. The lack of capability checks on any entry points is a notable concern, as it relies solely on WordPress's default authorization mechanisms for these entry points. This could potentially be exploited if WordPress's internal authorization logic is bypassed or if the entry points are intended for privileged actions. Overall, the plugin demonstrates good coding practices regarding SQL and output sanitization, but the past vulnerability and the absence of explicit capability checks introduce some level of risk.

Key Concerns

  • High severity CVE in history
  • No capability checks on entry points
Vulnerabilities
1

BlueSnap Payment Gateway for WooCommerce Security Vulnerabilities

CVEs by Year

1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

High
1

1 total CVE

CVE-2026-0692high · 7.5Missing Authorization

BlueSnap Payment Gateway for WooCommerce <= 3.4.0 - Missing Authorization to Unauthenticated Arbitrary Order Status Manipulation

Feb 13, 2026 Patched in 3.4.1 (21d)
Code Analysis
Analyzed Mar 16, 2026

BlueSnap Payment Gateway for WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
12
150 escaped
Nonce Checks
10
Capability Checks
0
File Operations
1
External Requests
2
Bundled Libraries
0

Output Escaping

93% escaped162 total outputs
Attack Surface

BlueSnap Payment Gateway for WooCommerce Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 2

authwp_ajax_bluesnap_dismiss_admin_noticeincludes\admin\class-wc-bluesnap-admin.php:38
authwp_ajax_bluesnap_dismiss_review_promptincludes\admin\class-wc-bluesnap-admin.php:39

Shortcodes 1

[bluesnap_multicurrency] includes\class-wc-bluesnap-multicurrency.php:103
WordPress Hooks 158
actionbefore_woocommerce_initbluesnap-for-woocommerce.php:38
actionadmin_noticesbluesnap-for-woocommerce.php:49
actionplugins_loadedclass-woocommerce-bluesnap-gateway.php:145
actionadmin_noticesclass-woocommerce-bluesnap-gateway.php:153
actioninitclass-woocommerce-bluesnap-gateway.php:295
actionplugins_loadedclass-woocommerce-bluesnap-gateway.php:296
filterwoocommerce_order_data_store_cpt_get_orders_queryclass-woocommerce-bluesnap-gateway.php:299
filterwoocommerce_order_query_argsclass-woocommerce-bluesnap-gateway.php:300
filterwoocommerce_payment_gatewaysclass-woocommerce-bluesnap-gateway.php:322
filterwoocommerce_email_classesclass-woocommerce-bluesnap-gateway.php:323
actionwc_ajax_bluesnap_reset_hpfclass-woocommerce-bluesnap-gateway.php:324
actionwp_loginclass-woocommerce-bluesnap-gateway.php:325
actionwoocommerce_blocks_loadedclass-woocommerce-bluesnap-gateway.php:328
actionwoocommerce_blocks_payment_method_type_registrationclass-woocommerce-bluesnap-gateway.php:402
actionadmin_enqueue_scriptsincludes\admin\class-wc-bluesnap-admin-assets.php:26
actionadmin_print_scriptsincludes\admin\class-wc-bluesnap-admin-assets.php:27
actionadmin_print_footer_scriptsincludes\admin\class-wc-bluesnap-admin-assets.php:28
actioncurrent_screenincludes\admin\class-wc-bluesnap-admin.php:30
actionadmin_noticesincludes\admin\class-wc-bluesnap-admin.php:34
actionadmin_noticesincludes\admin\class-wc-bluesnap-admin.php:35
filterwoocommerce_bluesnap_gateway_enqueue_scriptsincludes\class-wc-bluesnap-apple-pay.php:51
actionwoocommerce_proceed_to_checkoutincludes\class-wc-bluesnap-apple-pay.php:54
actionwoocommerce_proceed_to_checkoutincludes\class-wc-bluesnap-apple-pay.php:55
actionwoocommerce_checkout_before_customer_detailsincludes\class-wc-bluesnap-apple-pay.php:58
actionwoocommerce_checkout_before_customer_detailsincludes\class-wc-bluesnap-apple-pay.php:59
actionwoocommerce_pay_order_before_submitincludes\class-wc-bluesnap-apple-pay.php:62
actionwoocommerce_pay_order_before_submitincludes\class-wc-bluesnap-apple-pay.php:63
actionwoocommerce_subscriptions_change_payment_before_submitincludes\class-wc-bluesnap-apple-pay.php:66
actionwoocommerce_subscriptions_change_payment_before_submitincludes\class-wc-bluesnap-apple-pay.php:67
filterwoocommerce_validate_postcodeincludes\class-wc-bluesnap-apple-pay.php:69
filterwc_gateway_bluesnap_transaction_payment_method_payloadincludes\class-wc-bluesnap-apple-pay.php:70
filterwc_gateway_bluesnap_alternate_paymentincludes\class-wc-bluesnap-apple-pay.php:71
actionwc_ajax_bluesnap_create_apple_walletincludes\class-wc-bluesnap-apple-pay.php:74
actioninitincludes\class-wc-bluesnap-blocks.php:37
actionwp_enqueue_scriptsincludes\class-wc-bluesnap-frontend-assets.php:36
actionwp_print_scriptsincludes\class-wc-bluesnap-frontend-assets.php:37
actionwp_print_footer_scriptsincludes\class-wc-bluesnap-frontend-assets.php:38
filterwoocommerce_bluesnap_gateway_enqueue_scriptsincludes\class-wc-bluesnap-frontend-assets.php:39
filterwoocommerce_bluesnap_gateway_enqueue_stylesincludes\class-wc-bluesnap-frontend-assets.php:46
filterwoocommerce_bluesnap_gateway_enqueue_scriptsincludes\class-wc-bluesnap-frontend-assets.php:47
actionwc_gateway_bluesnap_new_ach_payment_successincludes\class-wc-bluesnap-gateway-ach.php:80
filterwoocommerce_payment_gateway_save_new_payment_method_option_htmlincludes\class-wc-bluesnap-gateway-ach.php:81
actionwc_gateway_bluesnap_save_subscription_idincludes\class-wc-bluesnap-gateway-addons-ach.php:34
actionwc_bluesnap_ach_preorder_ipnincludes\class-wc-bluesnap-gateway-addons-ach.php:42
filterwoocommerce_payment_gateway_get_new_payment_method_option_htmlincludes\class-wc-bluesnap-gateway-addons-ach.php:48
filterwoocommerce_available_payment_gatewaysincludes\class-wc-bluesnap-gateway-addons-ach.php:49
filterwoocommerce_can_subscription_be_updated_to_cancelledincludes\class-wc-bluesnap-gateway-addons-ach.php:50
filterwoocommerce_subscriptions_can_item_be_switchedincludes\class-wc-bluesnap-gateway-addons-ach.php:51
filterwoocommerce_can_subscription_be_updated_to_new-payment-methodincludes\class-wc-bluesnap-gateway-addons-ach.php:52
filterwoocommerce_subscriptions_can_user_renew_earlyincludes\class-wc-bluesnap-gateway-addons-ach.php:53
actionwoocommerce_before_checkout_formincludes\class-wc-bluesnap-gateway-addons-ach.php:56
filterwoocommerce_bluesnap_gateway_general_paramsincludes\class-wc-bluesnap-gateway-addons-ach.php:57
actionwc_gateway_bluesnap_save_subscription_idincludes\class-wc-bluesnap-gateway-addons.php:37
actionwoocommerce_subscription_status_cancelledincludes\class-wc-bluesnap-gateway-addons.php:38
actionwc_gateway_bluesnap_chargeback_ipnincludes\class-wc-bluesnap-gateway-addons.php:39
filterwc_gateway_bluesnap_payment_request_cart_item_line_itemsincludes\class-wc-bluesnap-gateway-addons.php:42
filterwc_gateway_bluesnap_payment_request_itemsincludes\class-wc-bluesnap-gateway-addons.php:43
filterbluesnap_3ds_total_amountincludes\class-wc-bluesnap-gateway-addons.php:44
filterwc_gateway_bluesnap_payment_request_itemsincludes\class-wc-bluesnap-gateway-addons.php:50
filterwc_gateway_bluesnap_payment_request_calculated_totalincludes\class-wc-bluesnap-gateway-addons.php:51
filterbluesnap_3ds_total_amountincludes\class-wc-bluesnap-gateway-addons.php:52
filterwc_gateway_bluesnap_payment_request_apple_pay_version_requiredincludes\class-wc-bluesnap-gateway-addons.php:55
filterwoocommerce_bluesnap_gateway_enqueue_scriptsincludes\class-wc-bluesnap-google-pay.php:41
actionwoocommerce_proceed_to_checkoutincludes\class-wc-bluesnap-google-pay.php:44
actionwoocommerce_proceed_to_checkoutincludes\class-wc-bluesnap-google-pay.php:45
actionwoocommerce_checkout_before_customer_detailsincludes\class-wc-bluesnap-google-pay.php:48
actionwoocommerce_checkout_before_customer_detailsincludes\class-wc-bluesnap-google-pay.php:49
actionwoocommerce_pay_order_before_submitincludes\class-wc-bluesnap-google-pay.php:52
actionwoocommerce_pay_order_before_submitincludes\class-wc-bluesnap-google-pay.php:53
actionwoocommerce_subscriptions_change_payment_before_submitincludes\class-wc-bluesnap-google-pay.php:56
actionwoocommerce_subscriptions_change_payment_before_submitincludes\class-wc-bluesnap-google-pay.php:57
filterwc_gateway_bluesnap_transaction_payment_method_payloadincludes\class-wc-bluesnap-google-pay.php:59
filterwc_gateway_bluesnap_payment_request_items_subtotalincludes\class-wc-bluesnap-google-pay.php:60
filterwc_gateway_bluesnap_payment_request_order_items_subtotalincludes\class-wc-bluesnap-google-pay.php:61
actionwoocommerce_api_bluesnapincludes\class-wc-bluesnap-ipn-webhooks.php:27
actioncurrent_screenincludes\class-wc-bluesnap-migrator.php:26
actionwoocommerce_scheduled_subscription_paymentincludes\class-wc-bluesnap-migrator.php:27
actionadmin_initincludes\class-wc-bluesnap-migrator.php:28
actionwoocommerce_before_checkout_formincludes\class-wc-bluesnap-migrator.php:29
actionwoocommerce_before_account_payment_methodsincludes\class-wc-bluesnap-migrator.php:30
actionwoocommerce_view_orderincludes\class-wc-bluesnap-migrator.php:31
actionwoocommerce_account_view-subscription_endpointincludes\class-wc-bluesnap-migrator.php:32
actionwc_bluesnap_maybe_migrateincludes\class-wc-bluesnap-migrator.php:33
actionwidgets_initincludes\class-wc-bluesnap-multicurrency.php:63
filterwoocommerce_get_price_htmlincludes\class-wc-bluesnap-multicurrency.php:66
filterpre_option_woocommerce_currency_posincludes\class-wc-bluesnap-multicurrency.php:75
filterwc_get_price_thousand_separatorincludes\class-wc-bluesnap-multicurrency.php:76
filterwc_get_price_decimal_separatorincludes\class-wc-bluesnap-multicurrency.php:77
filterwc_get_price_decimalsincludes\class-wc-bluesnap-multicurrency.php:78
actionwoocommerce_check_cart_itemsincludes\class-wc-bluesnap-multicurrency.php:81
actionwoocommerce_checkout_update_order_reviewincludes\class-wc-bluesnap-multicurrency.php:84
actionwc_ajax_bluesnap_set_multicurrencyincludes\class-wc-bluesnap-multicurrency.php:87
filterwoocommerce_shipping_free_shipping_is_availableincludes\class-wc-bluesnap-multicurrency.php:89
filterwoocommerce_shipping_legacy_free_shipping_is_availableincludes\class-wc-bluesnap-multicurrency.php:90
filterwoocommerce_get_variation_prices_hashincludes\class-wc-bluesnap-multicurrency.php:93
actionwoocommerce_checkout_update_customerincludes\class-wc-bluesnap-multicurrency.php:96
actionwoocommerce_scheduled_subscription_paymentincludes\class-wc-bluesnap-multicurrency.php:98
filterget_bluesnap_supported_currency_listincludes\class-wc-bluesnap-multicurrency.php:106
filterwc_bluesnap_settingsincludes\class-wc-bluesnap-multicurrency.php:107
actionwoocommerce_setup_cart_for_subscription_renewalincludes\class-wc-bluesnap-multicurrency.php:110
actiontemplate_redirectincludes\class-wc-bluesnap-multicurrency.php:111
actionwoocommerce_subscriptions_switch_added_to_cartincludes\class-wc-bluesnap-multicurrency.php:112
filterwoocommerce_order_again_cart_item_dataincludes\class-wc-bluesnap-multicurrency.php:113
actionwc_gateway_bluesnap_latest_currenciesincludes\class-wc-bluesnap-multicurrency.php:116
filterwoocommerce_hydration_dispatch_requestincludes\class-wc-bluesnap-multicurrency.php:123
filterwoocommerce_product_get_priceincludes\class-wc-bluesnap-multicurrency.php:137
filterwoocommerce_product_get_regular_priceincludes\class-wc-bluesnap-multicurrency.php:138
filterwoocommerce_product_sales_priceincludes\class-wc-bluesnap-multicurrency.php:139
filterwoocommerce_package_ratesincludes\class-wc-bluesnap-multicurrency.php:140
filterwoocommerce_shipping_rate_taxesincludes\class-wc-bluesnap-multicurrency.php:141
filterwoocommerce_subscriptions_product_sign_up_feeincludes\class-wc-bluesnap-multicurrency.php:142
filterwoocommerce_variation_prices_priceincludes\class-wc-bluesnap-multicurrency.php:143
filterwoocommerce_variation_prices_regular_priceincludes\class-wc-bluesnap-multicurrency.php:144
filterwoocommerce_variation_prices_sale_priceincludes\class-wc-bluesnap-multicurrency.php:145
filterwoocommerce_product_variation_get_priceincludes\class-wc-bluesnap-multicurrency.php:146
filterwoocommerce_product_variation_get_regular_priceincludes\class-wc-bluesnap-multicurrency.php:147
filterwoocommerce_product_variation_get_sale_priceincludes\class-wc-bluesnap-multicurrency.php:148
filterwoocommerce_product_variation_get__subscription_priceincludes\class-wc-bluesnap-multicurrency.php:149
filternonce_user_logged_outincludes\class-wc-bluesnap-multicurrency.php:305
filternonce_user_logged_outincludes\class-wc-bluesnap-multicurrency.php:311
filterwoocommerce_currencyincludes\class-wc-bluesnap-multicurrency.php:845
actionwoocommerce_order_status_on-hold_to_processingincludes\class-wc-bluesnap-order-handler.php:21
actionwoocommerce_order_status_on-hold_to_completedincludes\class-wc-bluesnap-order-handler.php:22
actionwoocommerce_order_status_on-hold_to_cancelledincludes\class-wc-bluesnap-order-handler.php:23
actionwoocommerce_order_status_on-hold_to_refundedincludes\class-wc-bluesnap-order-handler.php:24
actionadmin_initincludes\class-wc-bluesnap-order-handler.php:25
actionwoocommerce_pre_payment_completeincludes\class-wc-bluesnap-payment-request.php:118
filterwoocommerce_gateway_titleincludes\class-wc-bluesnap-payment-request.php:121
actionwc_bluesnap_scheduled_subscription_failureincludes\class-wc-bluesnap-payment-request.php:123
actionwoocommerce_subscriptions_paid_for_failed_renewal_orderincludes\class-wc-bluesnap-payment-request.php:125
actionwoocommerce_checkout_order_processedincludes\class-wc-bluesnap-payment-request.php:126
actionwoocommerce_checkout_create_subscriptionincludes\class-wc-bluesnap-payment-request.php:127
actionwc_gateway_bluesnap_renewal_payment_completeincludes\class-wc-bluesnap-payment-request.php:128
filterwc_gateway_bluesnap_get_adapted_payload_for_ondemand_walletincludes\class-wc-bluesnap-payment-request.php:129
filterwcs_renewal_order_meta_queryincludes\class-wc-bluesnap-payment-request.php:131
filterwoocommerce_bluesnap_gateway_enqueue_scriptsincludes\class-wc-bluesnap-payment-request.php:138
actiontemplate_redirectincludes\class-wc-bluesnap-payment-request.php:141
filterwoocommerce_subscription_payment_method_to_displayincludes\class-wc-bluesnap-payment-request.php:143
filterwc_gateway_bluesnap_validate_fieldsincludes\class-wc-bluesnap-payment-request.php:145
filterwc_gateway_bluesnap_payment_request_cart_compatibleincludes\class-wc-bluesnap-payment-request.php:146
actionwoocommerce_login_form_endincludes\class-wc-bluesnap-payment-request.php:147
actionwoocommerce_register_form_endincludes\class-wc-bluesnap-payment-request.php:148
filterwoocommerce_get_order_item_totalsincludes\class-wc-bluesnap-payment-request.php:150
actionwc_gateway_bluesnap_delete_cc_from_my_accountincludes\class-wc-bluesnap-token.php:49
actionwc_gateway_bluesnap_delete_ach_from_my_accountincludes\class-wc-bluesnap-token.php:50
filterwoocommerce_payment_methods_list_itemincludes\class-wc-bluesnap-token.php:51
filterwoocommerce_payment_methods_list_itemincludes\class-wc-bluesnap-token.php:52
actionbefore_woocommerce_payincludes\payment-methods\class-wc-bluesnap-gateway.php:77
actionwp_enqueue_scriptsincludes\payment-methods\class-wc-bluesnap-gateway.php:79
filterwoocommerce_bluesnap_gateway_enqueue_scriptsincludes\payment-methods\class-wc-bluesnap-gateway.php:80
filterwoocommerce_bluesnap_gateway_general_paramsincludes\payment-methods\class-wc-bluesnap-gateway.php:81
actionwc_gateway_bluesnap_new_card_payment_successincludes\payment-methods\class-wc-bluesnap-gateway.php:83
filterwoocommerce_update_order_review_fragmentsincludes\payment-methods\class-wc-bluesnap-gateway.php:84
actionwc_gateway_bluesnap_process_payment_errorincludes\payment-methods\class-wc-bluesnap-gateway.php:85
filterwoocommerce_get_customer_payment_tokensincludes\payment-methods\class-wc-bluesnap-gateway.php:86
actionwoocommerce_rest_checkout_process_payment_with_contextincludes\payment-methods\class-wc-bluesnap-gateway.php:89
filterwoocommerce_subscriptions_process_payment_for_change_method_via_pay_shortcodeincludes\trait-wc-bluesnap-addons.php:240
filterwoocommerce_bluesnap_gateway_enqueue_admin_scriptsincludes\woo-blocks\abstract-wc-bluesnap-block-compat.php:104
Maintenance & Trust

BlueSnap Payment Gateway for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 25, 2026
PHP min version8.2
Downloads10K

Community Trust

Rating46/100
Number of ratings3
Active installs100
Developer Profile

BlueSnap Payment Gateway for WooCommerce Developer Profile

Scott Ring

2 plugins · 110 total installs

88
trust score
Avg Security Score
91/100
Avg Patch Time
21 days
View full developer profile
Detection Fingerprints

How We Detect BlueSnap Payment Gateway for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/js/frontend/bluesnap-checkout-gateway.js/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/js/frontend/bluesnap-gateway.js/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/css/frontend/bluesnap-checkout.css
Script Paths
/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/js/frontend/bluesnap-checkout-gateway.js/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/js/frontend/bluesnap-gateway.js
Version Parameters
/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/js/frontend/bluesnap-checkout-gateway.js?ver=/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/js/frontend/bluesnap-gateway.js?ver=/wp-content/plugins/bluesnap-payment-gateway-for-woocommerce/assets/css/frontend/bluesnap-checkout.css?ver=

HTML / DOM Fingerprints

CSS Classes
bluesnap-gateway-form
Data Attributes
data-bluesnap-card-elementdata-bluesnap-form-id
JS Globals
bluesnap_gateway_params
FAQ

Frequently Asked Questions about BlueSnap Payment Gateway for WooCommerce