[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f0XuNaOD3v4e_ipt0N2XiJWi1SjrzMGRqxeJcjnPPyyA":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":13,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":46,"crawl_stats":36,"alternatives":52,"analysis":136,"fingerprints":234},"campay-api","Campay Woocommerce Payment Gateway","1.2.3","campay","https:\u002F\u002Fprofiles.wordpress.org\u002Fcampay\u002F","\u003Cp>CamPay is a Fintech service of the company TAKWID\u003Cbr \u002F>\nGROUP which launched its financial services in Cameroon\u003Cbr \u002F>\nfrom January 2021.\u003C\u002Fp>\n\u003Cp>We provide businesses and institutions with solutions for\u003Cbr \u002F>\ncollecting and transferring money online, via primarily\u003Cbr \u002F>\nMobile Money(MTN and Orange).\u003C\u002Fp>\n\u003Cp>With CamPay, simplify the purchasing experience for\u003Cbr \u002F>\nyour customers thanks to our mobile money\u003Cbr \u002F>\npayment solutions, accessible via your website\u003Cbr \u002F>\nand\u002For mobile application.\u003C\u002Fp>\n\u003Ch4>How it functions backend\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Install CamPay Payment Gateway in your website with Woocommerce activated\u003C\u002Fli>\n\u003Cli>Active the plugin\u003C\u002Fli>\n\u003Cli>Go into Woocommerce payment methods setting and activate CamPay Payment Gateway\u003C\u002Fli>\n\u003Cli>Set your App username and password (get it from https:\u002F\u002Fcampay.net\u002F)\u003C\u002Fli>\n\u003Cli>Save your settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How it function frontend\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>On Checkout page select CamPay Payment Gateway as your payment method.\u003C\u002Fli>\n\u003Cli>Input phone number to use for the payment (it must be a 9 digits valide MTN or Orange phone number)\u003C\u002Fli>\n\u003Cli>Click Command button\u003C\u002Fli>\n\u003Cli>On your mobile phone confirm payment \u003C\u002Fli>\n\u003Cli>You will be automatically redirected if payment was successfull or receive a failure message in case payment failed.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributors & Developers\u003C\u002Fh3>\n\u003Cp>CamPay Payment Gateway REST API was develop by CamPay with Gabinho as contributor to develop the WordPress plugin for Woocommerce\u003C\u002Fp>\n","CamPay is a Fintech service of the company TAKWID",200,9344,0,"2026-01-03T21:57:00.000Z","6.9.4","4.9","8.1",[19,20,21,22,23],"mobile-money","mtn-money","orange-money","payments","woocommerce","https:\u002F\u002Fcampay.net\u002Fwordpress\u002Fcampay-payment-gateway\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcampay-api.1.2.3.zip",99,1,"2025-12-11 14:34:19","2026-03-15T15:16:48.613Z",[31],{"id":32,"url_slug":33,"title":34,"description":35,"plugin_slug":4,"theme_slug":36,"affected_versions":37,"patched_in_version":6,"severity":38,"cvss_score":39,"cvss_vector":40,"vuln_type":41,"published_date":28,"updated_date":42,"references":43,"days_to_patch":45},"CVE-2025-12883","campay-woocommerce-payment-gateway-unauthenticated-payment-bypass","Campay Woocommerce Payment Gateway \u003C= 1.2.2 - Unauthenticated Payment Bypass","The Campay Woocommerce Payment Gateway plugin for WordPress is vulnerable to Unauthenticated Payment Bypass in all versions up to, and including, 1.2.2. This is due to the plugin not properly validating that a transaction has occurred through the payment gateway. This makes it possible for unauthenticated attackers to bypass payments and mark orders as successfully completed resulting in a loss of income.",null,"\u003C=1.2.2","medium",5.3,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:U\u002FC:N\u002FI:L\u002FA:N","Authorization Bypass Through User-Controlled Key","2025-12-20 14:47:51",[44],"https:\u002F\u002Fwww.wordfence.com\u002Fthreat-intel\u002Fvulnerabilities\u002Fid\u002F2f12fa00-6108-4bd4-9310-8558211f4d0f?source=api-prod",9,{"slug":7,"display_name":7,"profile_url":8,"plugin_count":47,"total_installs":48,"avg_security_score":49,"avg_patch_time_days":45,"trust_score":50,"computed_at":51},3,220,95,91,"2026-04-04T07:14:08.384Z",[53,69,83,100,116],{"slug":54,"name":55,"version":56,"author":7,"author_profile":8,"description":57,"short_description":10,"active_installs":58,"downloaded":59,"rating":13,"num_ratings":13,"last_updated":60,"tested_up_to":61,"requires_at_least":62,"requires_php":63,"tags":64,"homepage":66,"download_link":67,"security_score":68,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"campay-give","CamPay Give Donation Payment Gateway","1.0","\u003Cp>CamPay is a Fintech service of the company TAKWID\u003Cbr \u002F>\nGROUP which launched its financial services in Cameroon\u003Cbr \u002F>\nfrom January 2021.\u003C\u002Fp>\n\u003Cp>We provide businesses and institutions with solutions for\u003Cbr \u002F>\ncollecting and transferring money online, via primarily\u003Cbr \u002F>\nMobile Money(MTN and Orange).\u003C\u002Fp>\n\u003Cp>With CamPay, simplify the purchasing experience for\u003Cbr \u002F>\nyour customers thanks to our mobile money\u003Cbr \u002F>\npayment solutions, accessible via your website\u003Cbr \u002F>\nand\u002For mobile application.\u003C\u002Fp>\n\u003Ch4>Requiremnts\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WP Give Donation plugin must be installed\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How to setup\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Install CamPay Give Donation Payment Gateway in your website\u003C\u002Fli>\n\u003Cli>Active the plugin\u003C\u002Fli>\n\u003Cli>Go to Give (Donations) settings then go to payment gateways\u003C\u002Fli>\n\u003Cli>Set your App username and password (get it from https:\u002F\u002Fcampay.net\u002F)\u003C\u002Fli>\n\u003Cli>Save your settings.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>WE ARE USING A THIRD PARTY (CAMPAY HTTP API) IN THIS PLUGIN PLEASE READ BELOW\u003C\u002Fh3>\n\u003Cp>Campay Give plugin uses CamPay REST API present on campay.net to process payments. Full documentation about the API is present here : https:\u002F\u002Fdocumenter.getpostman.com\u002Fview\u002F2391374\u002FT1LV8PVA\u003Cbr \u002F>\nthe get_token function calls the \u002Ftoken\u002F endpoint of campay REST API to authenticate the user using the API.\u003Cbr \u002F>\nthe execute_payment function calls the \u002Fcollect\u002F endpoint of campay REST API to prompt the website user to confirm his donation by inserting secret code on his phone.\u003Cbr \u002F>\nthe check_payment function calls the \u002Ftransaction\u002F endpoint of campay REST API to check the status of the transaction initiated by execute_payment.\u003C\u002Fp>\n\u003Cp>Please visit https:\u002F\u002Fdocumenter.getpostman.com\u002Fview\u002F2391374\u002FT1LV8PVA for more information and contact info@campay.net for any question.\u003Cbr \u002F>\nVisit https:\u002F\u002Fwww.campay.net\u002Fstatic\u002Fdocs\u002FCamPay_Terms_and_Conditions.pdf for terms and conditions of usage and https:\u002F\u002Fwww.campay.net\u002Fstatic\u002Fdocs\u002FCamPay_Privacy_Policy.pdf for our privacy policy\u003C\u002Fp>\n\u003Ch3>Contributors & Developers\u003C\u002Fh3>\n\u003Cp>CamPay Give Donation Payment Gateway was develop by CamPay with gabinho as contributor to develop the WordPress plugin for Give-Donations Plugin\u003C\u002Fp>\n",10,66012,"2023-12-13T10:59:00.000Z","6.3.8","5.0","7.0",[19,20,21,22,65],"wp-give","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcampay-give.1.0.zip",85,{"slug":70,"name":71,"version":72,"author":7,"author_profile":8,"description":73,"short_description":10,"active_installs":58,"downloaded":74,"rating":13,"num_ratings":13,"last_updated":75,"tested_up_to":76,"requires_at_least":16,"requires_php":77,"tags":78,"homepage":80,"download_link":81,"security_score":82,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"campay-shortcode-payment-gateway","CamPay Shortcode Payment Gateway","1.6","\u003Cp>CamPay is a Fintech service of the company TAKWID\u003Cbr \u002F>\nGROUP which launched its financial services in Cameroon\u003Cbr \u002F>\nfrom January 2021.\u003C\u002Fp>\n\u003Cp>We provide businesses and institutions with solutions for\u003Cbr \u002F>\ncollecting and transferring money online, via primarily\u003Cbr \u002F>\nMobile Money(MTN and Orange).\u003C\u002Fp>\n\u003Cp>With CamPay, simplify the purchasing experience for\u003Cbr \u002F>\nyour customers thanks to our mobile money\u003Cbr \u002F>\npayment solutions, accessible via your website\u003Cbr \u002F>\nand\u002For mobile application.\u003C\u002Fp>\n\u003Ch4>How to setup\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Install CamPay Shortcode Payment Gateway in your website\u003C\u002Fli>\n\u003Cli>Active the plugin\u003C\u002Fli>\n\u003Cli>Go to settings then Campay Settings\u003C\u002Fli>\n\u003Cli>Set your App username and password (get it from https:\u002F\u002Fcampay.net\u002F)\u003C\u002Fli>\n\u003Cli>Save your settings.\u003C\u002Fli>\n\u003Cli>List of made payments can be viewed under the Campay Payments page\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>How to use\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>As indicate the plugin functions with shortcodes. the root of the shortcode is [campay]\u003C\u002Fli>\n\u003Cli>The shortcode has three mandatory parameters which are\n\u003Cul>\n\u003Cli>success_url : this parameter defines where to redirect the user after the payment was successful \u003C\u002Fli>\n\u003Cli>failure_url : this parameter defines where to redirect the user in case payment is not successful\u003C\u002Fli>\n\u003Cli>button_text : this parameter defines the text to display on the button generated by the shortcode\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Apart from this parameters we have two other parameters which are not mandatory\n\u003Cul>\n\u003Cli>amount : specify the amount the user has to pay. If this parameter is not set, user will be prompt to enter the amount he wish to pay for.\u003C\u002Fli>\n\u003Cli>product_title : to set the object of the payment \u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>Examples\n\u003Cul>\n\u003Cli>[campay success_url=”\u002Fthank-you\u002F” amount=20 failure_url=”\u002Ffailure\u002F” product_title=”test” button_text=”PAY”] \u003C\u002Fli>\n\u003Cli>[campay success_url=”\u002Fthank-you\u002F” failure_url=”\u002Ffailure\u002F” product_title=”test” button_text=”DONATE”]\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>After inserting the shortcode where you want to use it. the user will see on the page where is inserted a button with the title set\u003Cbr \u002F>\ninviting him to make a payment. Once he clicks on the button he will be prompt with a window inviting him to put the mobile number\u003Cbr \u002F>\nor the amount and mobile number to initiate the transaction.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Contributors & Developers\u003C\u002Fh3>\n\u003Cp>CamPay Payment Gateway REST API was develop by CamPay with INNO DS as contributor to develop the WordPress plugin for Woocommerce\u003C\u002Fp>\n",1676,"2025-07-20T12:30:00.000Z","6.8.5","5.6",[19,20,21,22,79],"shortcode","https:\u002F\u002Fcampay.net\u002Fwordpress\u002Fcampay-shortcode-payment-gateway\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcampay-shortcode-payment-gateway.1.6.zip",100,{"slug":84,"name":85,"version":86,"author":87,"author_profile":88,"description":89,"short_description":90,"active_installs":91,"downloaded":92,"rating":82,"num_ratings":27,"last_updated":93,"tested_up_to":76,"requires_at_least":62,"requires_php":94,"tags":95,"homepage":98,"download_link":99,"security_score":82,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"finachub-checkout-for-m-pesa","Finachub Lipa na Mpesa Checkout for WooCommerce","1.3.2","bnyamesa","https:\u002F\u002Fprofiles.wordpress.org\u002Fbnyamesa\u002F","\u003Cp>Finachub Lipa na Mpesa Checkout for WooCommerce provides the most straightforward way to integrate M-Pesa into your online store. This plugin allows your customers to pay using Safaricom’s STK Push prompt directly on their phones, creating a smooth and familiar checkout experience.\u003C\u002Fp>\n\u003Cp>Our plugin is designed for store owners who value simplicity and reliability. With a clean, modern admin interface and a focus on the core payment functionality, getting started is effortless.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Why Choose This Plugin?\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Seamless Integration:\u003C\u002Fstrong> Adds M-Pesa as a payment option directly into the WooCommerce checkout flow.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>User-Friendly:\u003C\u002Fstrong> Customers are prompted on their phones to complete the payment, a process they already know and trust.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern & Clean:\u003C\u002Fstrong> From the admin panels to the customer-facing waiting page, the interface is designed to be intuitive and professional.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Ready for Automation? Upgrade to Pro!\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>The free version is perfect for getting started, but it requires you to manually verify payments. When you’re ready to save time and automate your workflow, \u003Cstrong>\u003Ca href=\"https:\u002F\u002Ffinachub.com\u002Fproduct-category\u002Fplugins\u002Fmpesa\u002F\" rel=\"nofollow ugc\">M-Pesa Pro is ready for you\u003C\u002Fa>\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Ffinachub.com\u002Flive-demo\u002F\" rel=\"nofollow ugc\">View the Live Demo\u003C\u002Fa>\u003C\u002Fstrong> to see the Pro version in action.\u003C\u002Fp>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>Free Version Features:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Direct STK Push:\u003C\u002Fstrong> Initiates a payment prompt on the customer’s phone.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sandbox & Live Modes:\u003C\u002Fstrong> Easily switch between testing and live environments.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Secure & Reliable:\u003C\u002Fstrong> Built with security best practices and compatibility in mind.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Modern Admin UI:\u003C\u002Fstrong> A clean and intuitive interface for managing settings.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Comprehensive Guides:\u003C\u002Fstrong> Detailed setup and help pages right in your dashboard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Unlock Powerful Automation with the Pro Version:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Automatic Order Completion:\u003C\u002Fstrong> This is the biggest time-saver! The plugin automatically processes Safaricom’s callback to update order statuses from “Pending” to “Processing” or “Completed” the moment a payment is made. \u003Cstrong>No more manual verification!\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Detailed Transaction Dashboard:\u003C\u002Fstrong> A searchable, filterable dashboard in your WordPress admin showing all M-Pesa transactions and their statuses (Completed, Failed, etc.).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>CSV Data Export:\u003C\u002Fstrong> Easily export transaction data for accounting and reporting.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Priority Email Support:\u003C\u002Fstrong> Get faster, dedicated assistance from our support team.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>\u003Ca href=\"https:\u002F\u002Ffinachub.com\u002Fproduct-category\u002Fplugins\u002Fmpesa\u002F\" rel=\"nofollow ugc\">Learn More About Pro Features\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n","Accept M-Pesa STK Push payments in WooCommerce. A simple and reliable way to integrate Kenya's most popular payment method.",300,2977,"2025-07-23T14:48:00.000Z","7.2",[96,19,97,22,23],"lipa-na-mpesa","mpesa","https:\u002F\u002Ffinachub.com\u002Fproduct-category\u002Fplugins\u002Fmpesa\u002F%20%20\u002F\u002F%20Updated%20URL","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Ffinachub-checkout-for-m-pesa.1.3.2.zip",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":82,"downloaded":108,"rating":13,"num_ratings":13,"last_updated":109,"tested_up_to":15,"requires_at_least":110,"requires_php":111,"tags":112,"homepage":66,"download_link":115,"security_score":82,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"unitechpay-paiements-mobile-money","UnitechPay – Wave & Orange Money Payments","1.0.2","Unitech Web","https:\u002F\u002Fprofiles.wordpress.org\u002Funitechweb\u002F","\u003Cp>🚀 \u003Cstrong>RÉVOLUTIONNEZ VOS PAIEMENTS EN LIGNE !\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>UnitechPay est LA solution qui automatise complètement vos paiements Wave et Orange Money. Fini les transferts manuels, fini les retards de paiement !\u003C\u002Fp>\n\u003Cp>\u003Cstrong>✅ Fonctionnalités principales :\u003C\u002Fstrong>\u003Cbr \u002F>\n– 💰 \u003Cstrong>Wave + Orange Money\u003C\u002Fstrong> intégrés\u003Cbr \u002F>\n– ⚡ \u003Cstrong>Redistribution automatique\u003C\u002Fstrong> sur vos numéros\u003Cbr \u002F>\n– 🔒 \u003Cstrong>Aucune API requise\u003C\u002Fstrong> – Configuration ultra simple\u003Cbr \u002F>\n– 📱 \u003Cstrong>Interface responsive\u003C\u002Fstrong> optimisée mobile\u003Cbr \u002F>\n– 🛡️ \u003Cstrong>Sécurisé\u003C\u002Fstrong> et conforme aux standards\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🎯 Comment ça marche :\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Téléchargez le plugin gratuitement et installez-le sur votre site WordPress.\u003Cbr \u002F>\n2. Entrez vos numéros Wave et Orange Money. C’est tout ! Aucune API compliquée.\u003Cbr \u002F>\n3. Vos clients paient et vous recevez l’argent directement sur vos numéros instantanément.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>💡 Avantages uniques :\u003C\u002Fstrong>\u003Cbr \u002F>\n– ❌ \u003Cstrong>Plus de transferts manuels\u003C\u002Fstrong>\u003Cbr \u002F>\n– ❌ \u003Cstrong>Plus de commissions cachées\u003C\u002Fstrong>\u003Cbr \u002F>\n– ❌ \u003Cstrong>Plus de retards de paiement\u003C\u002Fstrong>\u003Cbr \u002F>\n– ✅ \u003Cstrong>Paiement client \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Réception instantanée\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🌍 Compatible avec :\u003C\u002Fstrong>\u003Cbr \u002F>\n– WordPress 6.0+\u003Cbr \u002F>\n– WooCommerce 6.0+\u003Cbr \u002F>\n– Tous les thèmes WordPress\u003Cbr \u002F>\n– Mobile et desktop\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📞 Support technique :\u003C\u002Fstrong>\u003Cbr \u002F>\nContactez-nous directement via WhatsApp au \u003Ca href=\"https:\u002F\u002Fwa.me\u002F221781972371\" rel=\"nofollow ugc\">📱 +221 78 197 23 71\u003C\u002Fa> pour une assistance rapide et personnalisée.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🏆 Idéal pour :\u003C\u002Fstrong>\u003Cbr \u002F>\n– E-commerce au Sénégal\u003Cbr \u002F>\n– Boutiques en ligne africaines\u003Cbr \u002F>\n– Services de paiement mobile\u003Cbr \u002F>\n– Marchands Wave et Orange Money\u003C\u002Fp>\n\u003Ch3>Third-party Services\u003C\u002Fh3>\n\u003Cp>Ce plugin utilise les services suivants pour fonctionner :\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🔧 API Centrale UnitechPay :\u003C\u002Fstrong>\u003Cbr \u002F>\n– URL : https:\u002F\u002Fpay.unitech.sn\u002Fwooplugin.php\u003Cbr \u002F>\n– Utilisation : Traitement des paiements et redistribution automatique\u003Cbr \u002F>\n– Données transmises : ID de commande, montants, numéros de destination\u003Cbr \u002F>\n– Politique de confidentialité : https:\u002F\u002Funitech.sn\u002Fprivacy-policy\u003C\u002Fp>\n\u003Cp>\u003Cstrong>💳 API Wave :\u003C\u002Fstrong>\u003Cbr \u002F>\n– URL : https:\u002F\u002Fapi.wave.com\u003Cbr \u002F>\n– Utilisation : Traitement des paiements Wave\u003Cbr \u002F>\n– Conditions d’utilisation : https:\u002F\u002Fwww.wave.com\u002Ffr\u002Fterms_and_conditions\u002F\u003Cbr \u002F>\n– Politique de confidentialité : https:\u002F\u002Fwww.wave.com\u002Ffr\u002Fprivacy\u002F\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📱 API Orange Money :\u003C\u002Fstrong>\u003Cbr \u002F>\n– URL : https:\u002F\u002Fapi.orange-sonatel.com\u003Cbr \u002F>\n– Utilisation : Traitement des paiements Orange Money\u003Cbr \u002F>\n– Conditions d’utilisation : https:\u002F\u002Fdeveloper.orange-sonatel.com\u002Fcgu\u003Cbr \u002F>\n– Politique de confidentialité : https:\u002F\u002Fwww.orange.sn\u002Fprivacy-policy\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🔒 Sécurité des données :\u003C\u002Fstrong>\u003Cbr \u002F>\nToutes les communications avec ces services sont effectuées via HTTPS. Les transactions sont traitées de manière sécurisée conformément aux standards de l’industrie.\u003C\u002Fp>\n\u003Ch3>Support\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>📞 Assistance technique gratuite :\u003C\u002Fstrong>\u003Cbr \u002F>\n– WhatsApp : \u003Ca href=\"https:\u002F\u002Fwa.me\u002F221781972371\" rel=\"nofollow ugc\">+221 78 197 23 71\u003C\u002Fa>\u003Cbr \u002F>\n– Email : contact@unitech.sn\u003Cbr \u002F>\n– Site web : https:\u002F\u002Funitech.sn\u003C\u002Fp>\n\u003Cp>\u003Cstrong>📚 Documentation :\u003C\u002Fstrong>\u003Cbr \u002F>\n– Guide d’installation : https:\u002F\u002Fpay.unitech.sn\u002Fplugin-woocommerce\u002F#installation\u003Cbr \u002F>\n– FAQ complète : https:\u002F\u002Fpay.unitech.sn\u002Fplugin-woocommerce\u002F#faq\u003C\u002Fp>\n\u003Ch3>Credits\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>👨‍💻 Développé par :\u003C\u002Fstrong>\u003Cbr \u002F>\n– Saliou Gueye – Développeur principal\u003Cbr \u002F>\n– Unitech Solutions – Entreprise de développement\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🙏 Remerciements :\u003C\u002Fstrong>\u003Cbr \u002F>\n– Communauté WordPress Sénégal\u003Cbr \u002F>\n– Utilisateurs beta testeurs\u003Cbr \u002F>\n– Partenaires Wave et Orange Money\u003C\u002Fp>\n\u003Cp>\u003Cstrong>💝 Contribuer :\u003C\u002Fstrong>\u003Cbr \u002F>\nUnitechPay est un projet open source. Vous pouvez contribuer via GitHub ou nous soutenir en recommandant le plugin à d’autres développeurs.\u003C\u002Fp>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Cp>\u003Cstrong>💼 Utilisations commerciales :\u003C\u002Fstrong>\u003Cbr \u002F>\nCe plugin peut être utilisé librement pour des projets commerciaux. La licence GPLv3 s’applique.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>🔄 Mises à jour :\u003C\u002Fstrong>\u003Cbr \u002F>\nLes mises à jour sont automatiques via le répertoire WordPress. Nous recommandons de maintenir le plugin à jour pour bénéficier des dernières fonctionnalités et corrections de sécurité.\u003C\u002Fp>\n","Solution complète de paiement Wave et Orange Money avec redistribution automatique. Recevez directement l'argent sur vos numéros !",1191,"2026-03-10T17:57:00.000Z","6.0","7.4",[19,21,113,114,23],"senegal","wave","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Funitechpay-paiements-mobile-money.1.0.2.zip",{"slug":117,"name":118,"version":119,"author":120,"author_profile":121,"description":122,"short_description":123,"active_installs":124,"downloaded":125,"rating":13,"num_ratings":13,"last_updated":126,"tested_up_to":127,"requires_at_least":128,"requires_php":129,"tags":130,"homepage":133,"download_link":134,"security_score":135,"vuln_count":13,"unpatched_count":13,"last_vuln_date":36,"fetched_at":29},"e-nkap-woocommerce-gateway","SmobilPay for e-commerce – Mobile Money Gateway for WooCommerce","1.0.8","Camoo Sarl","https:\u002F\u002Fprofiles.wordpress.org\u002Fcamoo\u002F","\u003Cp>\u003Cstrong>This is the Mobile Money payment gateway for WooCommerce.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Ch4>About the Smobilpay for e-Commerce Plugin\u003C\u002Fh4>\n\u003Cp>Smobilpay for e-commerce is an online payment service aggregator that allows web users and e-Commerce merchants to buy and sell on the Internet using international and all existing local payment methods in Cameroon.\u003Cbr \u002F>\nWe enable digital organizations to accept cash, Mobile Money, or card payment via a simple, unique API permitting local businesses to participate in the vast digital economy by transforming their service offerings into the world of e-commerce sites.\u003C\u002Fp>\n\u003Cp>This fully functional plugin has been developed for WooCommerce to help merchants diminish payment friction for their customers by meeting customers where they spend more and more time online!\u003C\u002Fp>\n\u003Cp>It works in both Sandbox (development mode) and Live (production mode)\u003C\u002Fp>\n\u003Ch4>About the plugin\u003C\u002Fh4>\n\u003Cp>Cameroonians avoid online buying because it lacks local payments known to consumers.\u003Cbr \u002F>\nCustomers are more likely to finalize a purchase on a site that has their preferred payment options. This SmobilPay for e-commerce plugin permits you to use all Mobile money payment gateways available in Cameroon with the WooCommerce plugin. This integration uses a single API. The user experience for the end-user be it tech-savvy or not, is hassle-free.\u003C\u002Fp>\n\u003Ch4>What is Smobilpay?\u003C\u002Fh4>\n\u003Cp>A digital one-stop-shop, providing cashless payment solutions for Government, Corporations and businesses, and also providing a seamless Digital payment solution, used by third-party agents to sell digital services to end consumers.\u003Cbr \u002F>\nThe smobilpay platform Boasts of being a major partner with giant service providers in Cameroon such as ENEO (Prepaid and Postpaid), CamWater, MTN, Orange, Yoomee, Canal+, and more. Its reliability, invulnerable security, and efficiency are evident enough via its partnership with GIMAC-the interoperability switch of BEAC (the Bank Of Central African States), where smobilpay serves as the lone digital service aggregator for the entire CEMAC(Central African Economic and Monetary Community) region.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Pay with Cameroon MTN Mobile Money\u003C\u002Fli>\n\u003Cli>Pay with Cameroon Orange Mobile Money\u003C\u002Fli>\n\u003Cli>Pay with Express Union Mobile Money\u003C\u002Fli>\n\u003Cli>Pay with SmobilPay Cash\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Donations\u003C\u002Fh3>\n","A secure and seamless plugin to receive and manage Cash, Mobile, and Card payments in Cameroon on your e-shop or website",30,5913,"2024-04-06T09:16:00.000Z","6.5.8","4.8","7.3",[131,19,21,132,23],"gateway","payment-aggregator","https:\u002F\u002Fenkap.cm\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fe-nkap-woocommerce-gateway.1.0.8.zip",92,{"attackSurface":137,"codeSignals":180,"taintFlows":217,"riskAssessment":218,"analyzedAt":233},{"hooks":138,"ajaxHandlers":176,"restRoutes":177,"shortcodes":178,"cronEvents":179,"entryPointCount":13,"unprotectedCount":13},[139,145,149,154,158,162,166,169,172],{"type":140,"name":141,"callback":142,"file":143,"line":144},"action","admin_notices","campay_plugin_admin_notice","campay-api.php",35,{"type":140,"name":146,"callback":147,"file":143,"line":148},"admin_init","campay_php_compatibility_check",57,{"type":150,"name":151,"callback":152,"file":143,"line":153},"filter","woocommerce_payment_gateways","campay_add_gateway_class",69,{"type":140,"name":155,"callback":156,"file":143,"line":157},"init","load_translations",76,{"type":140,"name":159,"callback":160,"file":143,"line":161},"plugins_loaded","campay_init_gateway_class",90,{"type":140,"name":163,"callback":164,"file":143,"line":165},"wp_footer","campay_payment_processing_modal",102,{"type":140,"name":163,"callback":167,"file":143,"line":168},"campay_checkout_form_submit",103,{"type":140,"name":159,"callback":170,"file":143,"line":171},"load_translation",104,{"type":140,"name":173,"callback":174,"file":143,"line":175},"wp_enqueue_scripts","payment_js",142,[],[],[],[],{"dangerousFunctions":181,"sqlUsage":186,"outputEscaping":188,"fileOperations":47,"externalRequests":215,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":216},[182],{"fn":183,"file":143,"line":184,"context":185},"assert",880,"assert(strlen($data) == 16);",{"prepared":13,"raw":13,"locations":187},[],{"escaped":189,"rawEcho":190,"locations":191},21,11,[192,195,197,199,201,203,205,207,209,211,213],{"file":143,"line":193,"context":194},44,"raw output",{"file":143,"line":196,"context":194},82,{"file":143,"line":198,"context":194},257,{"file":143,"line":200,"context":194},267,{"file":143,"line":202,"context":194},274,{"file":143,"line":204,"context":194},276,{"file":143,"line":206,"context":194},307,{"file":143,"line":208,"context":194},309,{"file":143,"line":210,"context":194},935,{"file":143,"line":212,"context":194},937,{"file":143,"line":214,"context":194},940,5,[],[],{"summary":219,"deductions":220},"The \"campay-api\" v1.2.3 plugin exhibits a mixed security posture. While it demonstrates good practices by exclusively using prepared statements for SQL queries and has no known unpatched vulnerabilities, several areas raise significant concerns. The complete absence of nonce checks and capability checks across all identified entry points (though currently zero) is a major red flag. This lack of proper authorization and protection against CSRF attacks means that if any entry points are introduced or discovered, they would be immediately exploitable. The presence of the `assert` function, a dangerous function that can be misused for code execution if not handled with extreme care, is also a point of concern, especially in conjunction with the lack of robust authentication checks.  The vulnerability history shows a past medium-severity vulnerability related to authorization bypass through a user-controlled key, which, while currently patched, suggests a pattern of potential weaknesses in how user-supplied data or keys are handled, necessitating ongoing vigilance. In conclusion, while the plugin avoids common pitfalls like raw SQL queries and unpatched CVEs, the fundamental absence of authentication and authorization mechanisms on its attack surface, coupled with the use of a dangerous function, presents a substantial risk if the attack surface expands or is discovered.",[221,223,225,227,230],{"reason":222,"points":58},"No nonce checks present",{"reason":224,"points":58},"No capability checks present",{"reason":226,"points":215},"Dangerous function 'assert' present",{"reason":228,"points":229},"Low percentage of properly escaped outputs (66%)",4,{"reason":231,"points":232},"Past medium severity vulnerability (Authorization Bypass)",15,"2026-03-16T20:26:02.104Z",{"wat":235,"direct":243},{"assetPaths":236,"generatorPatterns":238,"scriptPaths":239,"versionParams":241},[237],"\u002Fwp-content\u002Fplugins\u002Fcampay-api\u002Fassets\u002Fimg\u002Flogo-campay-momo.png",[],[240],"\u002Fwp-content\u002Fplugins\u002Fcampay-api\u002Fassets\u002Fjs\u002Fcampay_checkout.js",[242],"campay-api\u002Fassets\u002Fjs\u002Fcampay_checkout.js?ver=",{"cssClasses":244,"htmlComments":245,"htmlAttributes":248,"restEndpoints":259,"jsGlobals":261,"shortcodeOutput":263},[],[246,247],"\u003C!-- CamPay Payment Processing Modal -->","\u003C!-- CamPay Checkout Form Submit -->",[249,250,251,252,253,254,255,256,257,258],"data-campay-username","data-campay-password","data-campay-webhook-url","data-campay-webhook-key","data-campay-testmode","data-campay-dollar-activated","data-campay-card-activated","data-campay-euro-activated","data-campay-usd-xaf","data-campay-euro-xaf",[260],"\u002Fwp-json\u002Fcampay\u002Fv1\u002Fwebhook",[262],"window.campay_checkout_params",[]]