Checkout Gateway for Paddle Security & Risk Analysis

wordpress.org/plugins/checkout-gateway-for-paddle

Integrate Paddle Checkout with WooCommerce to sell products and subscriptions using Paddle’s hosted checkout.

0 active installs v1.0.0 PHP 7.0+ WP 6.2+ Updated Mar 8, 2026
checkoutpaddlepaymentswoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Checkout Gateway for Paddle Safe to Use in 2026?

Generally Safe

Score 100/100

Checkout Gateway for Paddle has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2mo ago
Risk Assessment

The plugin 'checkout-gateway-for-paddle' v1.0.0 exhibits a generally good security posture, demonstrating strong adherence to several best practices. Notably, all SQL queries utilize prepared statements, and a high percentage of output is properly escaped, mitigating common injection and XSS vulnerabilities. The presence of nonce and capability checks on a significant number of code paths further strengthens its defenses against unauthorized actions and access.

Key Concerns

  • Taint analysis identified 5 high severity flows
  • Use of dangerous function set_time_limit
  • File operations detected
  • External HTTP requests detected
  • Bundled libraries (Select2, Guzzle)
Vulnerabilities
None known

Checkout Gateway for Paddle Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Checkout Gateway for Paddle Release Timeline

No version history available.
Code Analysis
Analyzed Apr 16, 2026

Checkout Gateway for Paddle Code Analysis

Dangerous Functions
3
Raw SQL Queries
0
44 prepared
Unescaped Output
24
1257 escaped
Nonce Checks
26
Capability Checks
4
File Operations
7
External Requests
3
Bundled Libraries
2

Dangerous Functions Found

set_time_limitset_time_limit( 0 ); // phpcs:ignore Squiz.PHP.DiscouragedFunctions.Discouragedincludes/APIs/Paddle/Services/PricesService.php:448
set_time_limitset_time_limit( 0 ); // phpcs:ignore Squiz.PHP.DiscouragedFunctions.Discouragedincludes/Backgrounds/DirectBackgrounds/WebhookBackground.php:112
set_time_limitset_time_limit( 0 ); // phpcs:ignore Squiz.PHP.DiscouragedFunctions.Discouragedincludes/DBs/DBsBase/dbsList.php:18

Bundled Libraries

Select2Guzzle

SQL Query Safety

100% prepared44 total queries

Output Escaping

98% escaped1281 total outputs
Data Flows · Security
5 unsanitized

Data Flow Analysis

5 flows5 with unsanitized paths
get_row (includes/DBs/DBsBase/DB.php:278)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Checkout Gateway for Paddle Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 72
actionplugins_loadedcheckout-gateway-for-paddle.php:192
filtercron_schedulesincludes/Backgrounds/Base/BackgroundProcess.php:19
filterwoocommerce_payment_gatewaysincludes/Gateways/Base/GatewayBase.php:143
actionwoocommerce_sections_checkoutincludes/Gateways/Base/GatewayBase.php:145
actioninitincludes/Gateways/Base/GatewayBase.php:146
actionwp_headincludes/Gateways/Paddle/PaddleFrontend.php:115
actionwp_footerincludes/Gateways/Paddle/PaddleFrontend.php:116
actionwoocommerce_after_checkout_billing_formincludes/Gateways/Paddle/PaddleFrontend.php:117
actionwoocommerce_before_settings_checkoutincludes/Gateways/Paddle/PaddleGateway.php:93
actionadmin_enqueue_scriptsincludes/Gateways/Paddle/PaddleGateway.php:95
actionbefore_woocommerce_initincludes/Gateways/Paddle/PaddleGateway.php:97
actioninitincludes/MetaBoxes/MetaBoxesBase/MetaBox.php:113
actionadd_meta_boxesincludes/MetaBoxes/MetaBoxesBase/MetaBox.php:114
actionadmin_enqueue_scriptsincludes/MetaBoxes/MetaBoxesBase/MetaBox.php:117
filterwoocommerce_product_data_tabsincludes/PaddleCPT.php:134
actionwoocommerce_product_data_panelsincludes/PaddleCPT.php:135
actionwoocommerce_product_after_variable_attributesincludes/PaddleCPT.php:136
actionadmin_enqueue_scriptsincludes/PaddleCPT.php:137
filterwoocommerce_order_item_get_formatted_meta_dataincludes/PaddleOrder.php:77
actionwoocommerce_admin_order_data_after_shipping_addressincludes/PaddleOrder.php:78
actionwoocommerce_create_refundincludes/PaddleOrder.php:79
actionwoocommerce_admin_order_items_after_line_itemsincludes/PaddleOrder.php:80
actionwoocommerce_thankyouincludes/PaddleOrder.php:81
actionwoocommerce_thankyou_order_received_textincludes/PaddleOrder.php:82
actionwoocommerce_new_order_itemincludes/PaddleOrder.php:85
filterwoocommerce_order_amount_item_subtotalincludes/PaddleOrder.php:88
actionwoocommerce_admin_order_item_headersincludes/PaddleOrder.php:91
actionwoocommerce_admin_order_item_valuesincludes/PaddleOrder.php:92
actionwoocommerce_admin_order_item_headersincludes/PaddleOrder.php:95
actionwoocommerce_admin_order_item_valuesincludes/PaddleOrder.php:96
actionwoocommerce_admin_order_totals_after_taxincludes/PaddleOrder.php:99
actionwoocommerce_admin_order_totals_after_totalincludes/PaddleOrder.php:101
filterwoocommerce_order_get_subtotalincludes/PaddleOrder.php:104
filterwoocommerce_get_order_item_totalsincludes/PaddleOrder.php:107
filterwoocommerce_order_subtotal_to_displayincludes/PaddleOrder.php:110
filterwoocommerce_admin_order_buyer_nameincludes/PaddleOrder.php:113
actionwoocommerce_order_item_add_action_buttonsincludes/PaddleOrder.php:115
actionwoocommerce_order_item_add_action_buttonsincludes/PaddleOrder.php:116
filterwoocommerce_admin_order_should_render_refundsincludes/PaddleOrder.php:119
filterwc_tax_enabledincludes/PaddleOrder.php:120
actionwoocommerce_admin_order_totals_after_taxincludes/PaddleOrder.php:121
actionwoocommerce_order_details_before_order_tableincludes/PaddleOrder.php:124
filterwc_tax_enabledincludes/PaddleOrder.php:125
actionwoocommerce_after_order_detailsincludes/PaddleOrder.php:126
actionwoocommerce_email_before_order_tableincludes/PaddleOrder.php:129
filterwc_tax_enabledincludes/PaddleOrder.php:130
actionwoocommerce_email_after_order_tableincludes/PaddleOrder.php:131
filterwc_tax_enabledincludes/PaddleOrder.php:135
filterwoocommerce_email_subject_new_orderincludes/PaddleOrder.php:139
filterwoocommerce_email_heading_new_orderincludes/PaddleOrder.php:140
filterwoocommerce_analytics_update_order_stats_dataincludes/PaddleWooAnalytics.php:62
filterwoocommerce_order_needs_paymentincludes/PaddleWooCheckout.php:68
filterwoocommerce_available_payment_gatewaysincludes/PaddleWooCheckout.php:69
actionwoocommerce_checkout_processincludes/PaddleWooCheckout.php:71
actionwoocommerce_checkout_update_user_metaincludes/PaddleWooCheckout.php:73
actionwoocommerce_after_checkout_formincludes/PaddleWooCheckout.php:74
actionwoocommerce_pay_order_after_submitincludes/PaddleWooCheckout.php:75
filterwoocommerce_checkout_fieldsincludes/PaddleWooCheckout.php:78
actionwoocommerce_coupon_optionsincludes/PaddleWooDiscount.php:79
filterwoocommerce_settings_tabs_arrayincludes/Pages/PagesBase/AdminPage.php:219
actioninitincludes/Pages/PagesBase/AdminPage.php:294
actionadmin_menuincludes/Pages/PagesBase/AdminPage.php:295
actionadmin_enqueue_scriptsincludes/Pages/PagesBase/AdminPage.php:296
actionadmin_initincludes/Plugin.php:62
actionadmin_initincludes/Plugin.php:63
actionwoocommerce_save_product_variationincludes/Settings/SettingsBase/Settings.php:198
actionwp_loadedincludes/Settings/SettingsBase/Settings.php:202
actioninitincludes/Settings/SettingsBase/Settings.php:217
filterwp_kses_allowed_htmlincludes/Settings/SettingsFields/FieldBase.php:362
actioninitincludes/Shortcodes/ShortcodesBase/Shortcode.php:110
actioninitincludes/Webhooks/Base/WebhooksBase.php:107
actionparse_requestincludes/Webhooks/Base/WebhooksBase.php:108
Maintenance & Trust

Checkout Gateway for Paddle Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 8, 2026
PHP min version7.0
Downloads209

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Checkout Gateway for Paddle Developer Profile

GrandPlugins

21 plugins · 9K total installs

74
trust score
Avg Security Score
93/100
Avg Patch Time
160 days
View full developer profile
Detection Fingerprints

How We Detect Checkout Gateway for Paddle

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/checkout-gateway-for-paddle/assets/dist/css/front/style-head.min.css/wp-content/plugins/checkout-gateway-for-paddle/assets/dist/js/front/paddle-checkout.min.js/wp-content/plugins/checkout-gateway-for-paddle/assets/dist/js/front/paddle-pay-action.min.js/wp-content/plugins/checkout-gateway-for-paddle/assets/dist/js/front/paddle-single.min.js
Script Paths
/wp-content/plugins/checkout-gateway-for-paddle/vendor/autoload.php
Version Parameters
checkout-gateway-for-paddle/assets/dist/css/front/style-head.min.css?ver=checkout-gateway-for-paddle/assets/dist/js/front/paddle-checkout.min.js?ver=checkout-gateway-for-paddle/assets/dist/js/front/paddle-pay-action.min.js?ver=checkout-gateway-for-paddle/assets/dist/js/front/paddle-single.min.js?ver=

HTML / DOM Fingerprints

CSS Classes
gpls-wplesktgpls-general
Data Attributes
data-plugin-prefix="gpls-wpleskt"data-prefix="gpls-wpleskt"
JS Globals
paddle_checkout_for_woocommerce_localize_data
FAQ

Frequently Asked Questions about Checkout Gateway for Paddle