CashEnvoy Woocommerce Payment Gateway Security & Risk Analysis

wordpress.org/plugins/cashenvoy-woocommerce-payment-gateway

CashEnvoy Woocommerce Payment Gateway allows you to accept payment on your Woocommerce store via Visa Cards, Mastercards, Verve Cards and eTranzact.

10 active installs v1.0.0 PHP + WP 3.5+ Updated Jul 21, 2014
cashenvoyinterswitchpayment-gatewaypayment-gatewayswoocommerce
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is CashEnvoy Woocommerce Payment Gateway Safe to Use in 2026?

Generally Safe

Score 85/100

CashEnvoy Woocommerce Payment Gateway has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 11yr ago
Risk Assessment

The plugin 'cashenvoy-woocommerce-payment-gateway' v1.0.0 exhibits a generally strong security posture based on the provided static analysis. The absence of detected AJAX handlers, REST API routes, shortcodes, cron events, and file operations significantly limits its attack surface. Furthermore, the code signals show no dangerous functions, no raw SQL queries (all prepared statements), and no external HTTP requests, which are excellent indicators of secure coding practices. The lack of any recorded vulnerability history reinforces this positive assessment, suggesting a history of secure development and maintenance.

Key Concerns

  • Minor output escaping concern
  • Lack of capability checks
  • Lack of nonce checks
Vulnerabilities
None known

CashEnvoy Woocommerce Payment Gateway Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

CashEnvoy Woocommerce Payment Gateway Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
6 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

67% escaped9 total outputs
Attack Surface

CashEnvoy Woocommerce Payment Gateway Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 9
actionplugins_loadedcashenvoy-woocommerce-payment-gateway.php:16
actionwoocommerce_receipt_cashenvoy_gatewaycashenvoy-woocommerce-payment-gateway.php:54
actionwoocommerce_api_wc_cashenvoy_gatewaycashenvoy-woocommerce-payment-gateway.php:58
actionwpcashenvoy-woocommerce-payment-gateway.php:399
filterwoocommerce_payment_gatewayscashenvoy-woocommerce-payment-gateway.php:410
filterwoocommerce_currenciescashenvoy-woocommerce-payment-gateway.php:421
filterwoocommerce_currency_symbolcashenvoy-woocommerce-payment-gateway.php:433
filterplugin_action_linkscashenvoy-woocommerce-payment-gateway.php:451
filterplugin_action_linkscashenvoy-woocommerce-payment-gateway.php:471
Maintenance & Trust

CashEnvoy Woocommerce Payment Gateway Maintenance & Trust

Maintenance Signals

WordPress version tested3.9.40
Last updatedJul 21, 2014
PHP min version
Downloads5K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

CashEnvoy Woocommerce Payment Gateway Developer Profile

chemikawale

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect CashEnvoy Woocommerce Payment Gateway

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/cashenvoy-woocommerce-payment-gateway/img/cashenvoy.png

HTML / DOM Fingerprints

CSS Classes
cashenvoy_payment_form
Data Attributes
id="cashenvoy_payment_form"
JS Globals
window.transrefwindow.urlmodewindow.order_idsessionStorage.transrefsessionStorage.urlmodesessionStorage.order_id
REST Endpoints
wc-api/WC_CashEnvoy_Gateway
FAQ

Frequently Asked Questions about CashEnvoy Woocommerce Payment Gateway