Does Boxcoin have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Boxcoin compatible with WordPress 6.8.5?

According to WordPress.org data, Boxcoin 1.0.3 has been tested up to WordPress 6.8.5. Check the plugin's changelog for the latest compatibility information.

Is Boxcoin compatible with PHP 7.4+?

Boxcoin requires PHP 7.4 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Boxcoin updated?

Boxcoin was last updated on Sep 12, 2025. Frequent updates are generally a positive security signal.

What is Boxcoin's security score?

Boxcoin has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Boxcoin Security & Risk Analysis

wordpress.org/plugins/boxcoin-cloud

Accept Cryptocurrency Payments Within Minutes

10 active installs v1.0.3 PHP 7.4+ WP 3.0.0+ Updated Sep 12, 2025

bitcoincrypto-payment-gatewaycrypto-processorpayment-gatewaywoocommerce-crypto

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Boxcoin Safe to Use in 2026?

Generally Safe

Score 100/100

Boxcoin has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11mo ago

Risk Assessment

The boxcoin-cloud plugin v1.0.3 exhibits a generally positive security posture due to its adherence to several good coding practices. The absence of dangerous functions, the exclusive use of prepared statements for SQL queries, and a high percentage of properly escaped output are commendable. The plugin also demonstrates an awareness of security by including nonce checks and a file operation, albeit one.

Key Concerns

REST API route without permission callbacks
Unprotected entry point (REST API)
Capability checks are absent
Low percentage of output escaping (11%)

Vulnerabilities

None known

Boxcoin Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Boxcoin Release Timeline

No version history available.

Code Analysis

Analyzed Mar 16, 2026

Boxcoin Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

17 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

89% escaped19 total outputs

Data Flows · Security

All sanitized

Data Flow Analysis

2 flows

bxc_admin (index.php:169)

Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized

Attack Surface

1 unprotected

Boxcoin Attack Surface

Entry Points1

Unprotected1

REST API Routes 1

POST/wp-json/boxcoin/webhookindex.php:316

WordPress Hooks 14

actionwoocommerce_blocks_payment_method_type_registrationindex.php:63

filterwoocommerce_payment_gatewaysindex.php:101

actionwoocommerce_blocks_loadedindex.php:103

actionplugins_loadedindex.php:104

actionbefore_woocommerce_initindex.php:105

actionadmin_menuindex.php:307

actionnetwork_admin_menuindex.php:308

actionadmin_enqueue_scriptsindex.php:309

actionedd_gateway_boxcoinindex.php:310

actionedd_boxcoin_cc_formindex.php:311

filteredd_payment_gatewaysindex.php:312

actionwp_logoutindex.php:313

actionwp_headindex.php:314

actionrest_api_initindex.php:315

Maintenance & Trust

Boxcoin Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5

Last updatedSep 12, 2025

PHP min version7.4

Downloads3K

Community Trust

Rating0/100

Number of ratings0

Active installs10

Alternatives

Boxcoin Alternatives

Acceptcoin

accept-coin

Acceptcoin is an innovative integrated payment gateway for accepting cryptocurrencies as payment for the purchase of goods and services on the seller& …

0 No CVEs

NOWPayments for WooCommerce – Crypto Payment Gateway

nowpayments-for-woocommerce

Accept Bitcoin, Ethereum, and 300+ cryptocurrencies in WooCommerce using the official NOWPayments crypto payment gateway.

4K 1 unpatched

CryptoCloud – Crypto Payment Gateway

cryptocloud-crypto-payment-gateway

CryptoCloud - cryptocurrency payment system for business. We offer to you a possibility to accept payments worldwide in 40+ cryptocurrencies.

400 1 CVE

OxaPay Crypto Payment Gateway: Accept Bitcoin Payments

oxapay

100

Secure crypto payment plugin for WordPress

200 No CVEs

Speed Bitcoin and Stablecoin Payments for WooCommerce

speed-accept-bitcoin-payments

100

Start accepting bitcoin or stablecoin payments instantly on your platform using Speed, without exchange rate volatility risk.

80 No CVEs

Developer Profile

Boxcoin Developer Profile

Boxcoin

1 plugin · 10 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Boxcoin

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/boxcoin-cloud/assets/checkout.js/wp-content/plugins/boxcoin-cloud/assets/style.css

Script Paths

/wp-content/plugins/boxcoin-cloud/assets/checkout.js

Version Parameters

boxcoin-cloud/assets/style.css?ver=

HTML / DOM Fingerprints

JS Globals

bxc_href

FAQ