Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Security & Risk Analysis

wordpress.org/plugins/buy-now-button-direct-checkout-quick-checkoutpurchase-button-for-woocommerce

Adds "Buy now" button below "Add to cart" button that add product to cart via custom ajax and directly redirects to checkout page for quick purchase.

20 active installs v1.0.0 PHP 7.2+ WP 5.8+ Updated Nov 9, 2022
buy-now-buttoncheckoutdirect-checkoutquick-checkoutquick-purchase
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Safe to Use in 2026?

Generally Safe

Score 85/100

Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3yr ago
Risk Assessment

The "buy-now-button-direct-checkout-quick-checkoutpurchase-button-for-woocommerce" plugin version 1.0.0 exhibits a concerning security posture primarily due to a significant number of unprotected AJAX handlers. While the absence of dangerous functions, the use of prepared statements for SQL queries, and no reported vulnerability history are positive indicators, the lack of authentication checks on all identified entry points presents a substantial risk. The code analysis reveals 4 AJAX handlers, all of which lack authentication, creating a wide attack surface that could be exploited by unauthenticated users. The moderate rate of properly escaped output further adds to potential cross-site scripting (XSS) vulnerabilities, though not explicitly identified as critical in taint analysis. The plugin's clean vulnerability history is a strength, suggesting a generally well-maintained codebase, but this is overshadowed by the readily exploitable entry points.

Key Concerns

  • AJAX handlers without authentication
  • Low rate of output escaping
  • Limited capability checks
Vulnerabilities
None known

Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
6
5 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

45% escaped11 total outputs
Attack Surface
4 unprotected

Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Attack Surface

Entry Points4
Unprotected4

AJAX Handlers 4

authwp_ajax_buy_now_direct_checkout_woocommerce_buy_now_clickincludes\class-buy-now-direct-checkout-for-woocommerce.php:179
noprivwp_ajax_buy_now_direct_checkout_woocommerce_buy_now_clickincludes\class-buy-now-direct-checkout-for-woocommerce.php:180
authwp_ajax_buy_now_direct_checkout_woocommerce_get_buy_now_nonceincludes\class-buy-now-direct-checkout-for-woocommerce.php:181
noprivwp_ajax_buy_now_direct_checkout_woocommerce_get_buy_now_nonceincludes\class-buy-now-direct-checkout-for-woocommerce.php:182
WordPress Hooks 9
actionadmin_initadmin\class-buy-now-direct-checkout-for-woocommerce-admin.php:114
actionadmin_noticesbuy-now-direct-checkout-for-woocommerce.php:72
actionplugins_loadedincludes\class-buy-now-direct-checkout-for-woocommerce.php:144
actionadmin_enqueue_scriptsincludes\class-buy-now-direct-checkout-for-woocommerce.php:159
actionadmin_enqueue_scriptsincludes\class-buy-now-direct-checkout-for-woocommerce.php:160
actionadmin_menuincludes\class-buy-now-direct-checkout-for-woocommerce.php:161
actionwp_enqueue_scriptsincludes\class-buy-now-direct-checkout-for-woocommerce.php:176
actionwp_enqueue_scriptsincludes\class-buy-now-direct-checkout-for-woocommerce.php:177
actionwoocommerce_after_add_to_cart_buttonincludes\class-buy-now-direct-checkout-for-woocommerce.php:178
Maintenance & Trust

Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.1.10
Last updatedNov 9, 2022
PHP min version7.2
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs20
Developer Profile

Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce Developer Profile

mrjz

1 plugin · 20 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/buy-now-direct-checkout-for-woocommerce/admin/css/buy-now-direct-checkout-for-woocommerce-admin.css/wp-content/plugins/buy-now-direct-checkout-for-woocommerce/admin/js/buy-now-direct-checkout-for-woocommerce-admin.js
Version Parameters
buy-now-direct-checkout-for-woocommerce/admin/js/buy-now-direct-checkout-for-woocommerce-admin.js?ver=buy-now-direct-checkout-for-woocommerce/admin/css/buy-now-direct-checkout-for-woocommerce-admin.css?ver=

HTML / DOM Fingerprints

CSS Classes
bndcfw-buy-now-button-classesbndcfw-buy-now-empty-cart
FAQ

Frequently Asked Questions about Buy Now Button, Direct Checkout, Quick Checkout / Purchase Button For WooCommerce