[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fQIDGRAIVALTHOpQkE-ETAsIthVuccSwD7DNcj03hLXQ":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":18,"download_link":19,"security_score":20,"vuln_count":11,"unpatched_count":11,"last_vuln_date":21,"fetched_at":22,"vulnerabilities":23,"developer":24,"crawl_stats":21,"alternatives":31,"analysis":32,"fingerprints":147},"cointopay-gateway-for-easy-digital-downloads","Cointopay Gateway for Easy Digital Downloads","1.9","Cointopaydev","https:\u002F\u002Fprofiles.wordpress.org\u002Fcointopay\u002F","\u003Cp>Cointopay gateway for Easy Digital Downloads is a plugin to accept Cryptocurrency payments for a service or product using Cointopay payment service.\u003Cbr \u002F>\nInstall Cointopay plugin on top of Easy Digital Downloads WordPress plugin to use it.\u003C\u002Fp>\n\u003Ch3>Complete the Initial Plugin Setup\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Easily take payment for a service from your site via Cointopay.\u003C\u002Fli>\n\u003Cli>The ultimate plugin to create Cointopay payment option.\u003C\u002Fli>\n\u003Cli>Enabled it from Easy Digital Downloads payment settings and you can see it in checkout page.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Support or Contact\u003C\u002Fh3>\n\u003Cp>Please contact support@cointopay.com for feature requests and\u002For incidents, or create a ticket here: https:\u002F\u002Fcointopay.freshdesk.com\u002Fhelpdesk\u003C\u002Fp>\n\u003Ch3>About Cointopay.com\u003C\u002Fh3>\n\u003Cp>We are an international crypto currency payment processor, meaning that we accept payments from your customers and make the funds available to you (incl. in form of fiat currency like euro). The direct integration with Magento provides you with a seamless payment experience while underlying dealing with diverse and complex blockchain technologies like Bitcoin, Ethereum, Neo, Dash, Ripple and many more. P.S. If you want your own crypto currency to become available in this plugin, we can provide that for you as well, Cointopay has been a technological payment incubator since 2014!\u003C\u002Fp>\n","Cointopay gateway for Easy Digital Downloads is a plugin to accept Cryptocurrency payments for a service or product using Cointopay payment service.",0,1632,"2025-12-11T05:29:00.000Z","6.9.4","4.4.2","",[],"https:\u002F\u002Fcointopay.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcointopay-gateway-for-easy-digital-downloads.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":25,"display_name":7,"profile_url":8,"plugin_count":26,"total_installs":27,"avg_security_score":20,"avg_patch_time_days":28,"trust_score":29,"computed_at":30},"cointopay",5,70,30,94,"2026-04-05T10:24:35.393Z",[],{"attackSurface":33,"codeSignals":90,"taintFlows":139,"riskAssessment":140,"analyzedAt":146},{"hooks":34,"ajaxHandlers":86,"restRoutes":87,"shortcodes":88,"cronEvents":89,"entryPointCount":11,"unprotectedCount":11},[35,41,44,49,54,58,62,67,71,75,78,82],{"type":36,"name":37,"callback":38,"file":39,"line":40},"action","admin_notices","cointopayNoticeEdd","easy-digital-downloads-cointopay-gateway.php",28,{"type":36,"name":37,"callback":42,"file":39,"line":43},"cointopay_admin_notices",79,{"type":45,"name":46,"callback":47,"file":39,"line":48},"filter","edd_payment_confirm_cointopay","eddCointopaysuccessPagecontent",82,{"type":45,"name":50,"callback":51,"priority":52,"file":39,"line":53},"edd_payment_gateways","registerCointopaygateway",1,122,{"type":45,"name":55,"callback":56,"file":39,"line":57},"edd_show_gateways","maybeHidegatewaySelect",195,{"type":45,"name":59,"callback":60,"file":39,"line":61},"edd_load_scripts_in_footer","__return_false",198,{"type":45,"name":63,"callback":64,"priority":65,"file":39,"line":66},"edd_get_payment_transaction_id-cointopay","eddCointopaygetPaymenttransactionId",10,201,{"type":45,"name":68,"callback":69,"priority":52,"file":39,"line":70},"edd_settings_sections_gateways","eddRegistercointopayGatewaysection",204,{"type":45,"name":72,"callback":73,"priority":52,"file":39,"line":74},"edd_settings_gateways","registerCointopaygatewaySettings",205,{"type":36,"name":76,"callback":60,"file":39,"line":77},"edd_cointopay_cc_form",218,{"type":36,"name":79,"callback":80,"file":39,"line":81},"template_redirect","eddCointopayprocessPdtonReturn",219,{"type":36,"name":83,"callback":84,"file":39,"line":85},"edd_gateway_cointopay","eddProcesscointopayPurchase",220,[],[],[],[],{"dangerousFunctions":91,"sqlUsage":92,"outputEscaping":94,"fileOperations":11,"externalRequests":137,"nonceChecks":52,"capabilityChecks":11,"bundledLibraries":138},[],{"prepared":11,"raw":11,"locations":93},[],{"escaped":95,"rawEcho":96,"locations":97},22,18,[98,101,103,105,107,109,111,113,115,117,119,121,123,125,127,129,131,134],{"file":39,"line":99,"context":100},531,"raw output",{"file":39,"line":102,"context":100},533,{"file":39,"line":104,"context":100},543,{"file":39,"line":106,"context":100},545,{"file":39,"line":108,"context":100},555,{"file":39,"line":110,"context":100},557,{"file":39,"line":112,"context":100},567,{"file":39,"line":114,"context":100},569,{"file":39,"line":116,"context":100},579,{"file":39,"line":118,"context":100},581,{"file":39,"line":120,"context":100},591,{"file":39,"line":122,"context":100},593,{"file":39,"line":124,"context":100},603,{"file":39,"line":126,"context":100},605,{"file":39,"line":128,"context":100},615,{"file":39,"line":130,"context":100},617,{"file":132,"line":133,"context":100},"templates\\payment-completed.php",4,{"file":135,"line":136,"context":100},"templates\\payment-failed.php",7,2,[],[],{"summary":141,"deductions":142},"The \"cointopay-gateway-for-easy-digital-downloads\" plugin v1.9 exhibits a generally strong security posture based on the provided static analysis. The absence of any known CVEs, coupled with the fact that all SQL queries utilize prepared statements, indicates good development practices regarding data security and a clean vulnerability history.  The plugin also demonstrates an effort to secure its limited entry points, as evidenced by the presence of a nonce check and the lack of unprotected AJAX handlers or REST API routes. File operations and direct use of dangerous functions are also absent, further contributing to its secure design. \n\nHowever, a significant concern arises from the output escaping, where only 55% of outputs are properly escaped. This leaves a portion of the plugin's output vulnerable to cross-site scripting (XSS) attacks. While the attack surface is minimal and no critical taint flows were identified, the unescaped outputs represent a potential entry point for malicious actors. The presence of external HTTP requests, while not inherently risky, warrants careful review in conjunction with the unescaped outputs to ensure no sensitive data is inadvertently exposed or manipulated. Overall, the plugin is in a relatively good state, but the output escaping needs immediate attention to mitigate XSS risks.",[143],{"reason":144,"points":145},"Low percentage of properly escaped output",6,"2026-03-17T07:20:36.195Z",{"wat":148,"direct":156},{"assetPaths":149,"generatorPatterns":152,"scriptPaths":153,"versionParams":154},[150,151],"\u002Fwp-content\u002Fplugins\u002Fcointopay-gateway-for-easy-digital-downloads\u002Fincludes\u002Fcointopay\u002Finit.php","\u002Fwp-content\u002Fplugins\u002Fcointopay-gateway-for-easy-digital-downloads\u002Fincludes\u002Fcointopay\u002Fversion.php",[],[],[155],"cointopay-gateway-for-easy-digital-downloads\u002Feasy-digital-downloads-cointopay-gateway.php?ver=",{"cssClasses":157,"htmlComments":158,"htmlAttributes":159,"restEndpoints":160,"jsGlobals":161,"shortcodeOutput":162},[],[],[],[],[],[]]