[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fRbAZreSKYjKR7KP76bSCRI51uewufyMGYqjZjzeJh1Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":129,"fingerprints":280},"credo-payment-forms","Credo WooCommerce Payment Gateway","2.0.2","credocentral","https:\u002F\u002Fprofiles.wordpress.org\u002Fcredocentral\u002F","\u003Cp>Credo enables easier, intelligent, and rewarding payments for businesses and consumers alike, by combining the best of digital payments and digital innovation.\u003C\u002Fp>\n\u003Cp>With Credo for WooCommerce, you can accept payments via:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Credit\u002FDebit Cards:  Visa, Mastercard, Verve\u003C\u002Fli>\n\u003Cli>Bank transfer (Nigeria)\u003C\u002Fli>\n\u003Cli>Many more coming soon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Why Credo?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Easy onboarding. Start receiving payments instantly. Go from sign-up to your first real transaction in as little as 5 minutes\u003C\u002Fli>\n\u003Cli>Settlement the way you want them.\u003C\u002Fli>\n\u003Cli>Simple, transparent pricing—no hidden charges or fees\u003C\u002Fli>\n\u003Cli>Advance fraud protection\u003C\u002Fli>\n\u003Cli>Your business growth our promise\u003C\u002Fli>\n\u003Cli>Understand your customers better through a simple and elegant dashboard\u003C\u002Fli>\n\u003Cli>Access to attentive, empathetic customer support 24\u002F7\u003C\u002Fli>\n\u003Cli>Free updates as we launch new features and payment options\u003C\u002Fli>\n\u003Cli>Integration as easy as ABC\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Sign up on \u003Ca href=\"https:\u002F\u002Fcredocentral.com\u002Fregister\" rel=\"nofollow ugc\">credocentral.com\u002Fregister\u003C\u002Fa> to get started.\u003C\u002Fp>\n\u003Ch4>Note\u003C\u002Fh4>\n\u003Cp>This plugin is meant to be used by merchants in Nigeria\u003C\u002Fp>\n\u003Ch4>Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Accept payment\u003C\u002Fstrong> via Mastercard, Visa, Verve and Bank Transfer,\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Seamless integration\u003C\u002Fstrong> into the WooCommerce checkout page. Accept payment directly on your site\u003C\u002Fli>\n\u003C\u002Ful>\n","Credo enables easier, intelligent, and rewarding payments for businesses and consumers alike, by combining the best of digital payments and digital in …",10,4585,0,"2024-06-05T16:09:00.000Z","6.5.8","5.8","7.4",[19,20,21,22,23],"credo","payment-gateway-mastercard","verve","visa","woocommerce","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fcredo-payment-forms","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fcredo-payment-forms.zip",92,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,88,"2026-04-04T02:13:42.051Z",[36,58,75,95,112],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":17,"tags":51,"homepage":55,"download_link":56,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"woo-paystack","Paystack WooCommerce Payment Gateway","5.8.2","Tunbosun Ayinla","https:\u002F\u002Fprofiles.wordpress.org\u002Ftubiz\u002F","\u003Cp>Paystack makes it easy for businesses in Nigeria, Ghana, Kenya and South Africa to accept secure payments from multiple local and global payment channels. Integrate Paystack with your store today, and let your customers pay you with their choice of methods.\u003C\u002Fp>\n\u003Cp>With Paystack for WooCommerce, you can accept payments via:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Credit\u002FDebit Cards — Visa, Mastercard, Verve (NG, GH, KE), American Express (SA only)\u003C\u002Fli>\n\u003Cli>Bank transfer (Nigeria)\u003C\u002Fli>\n\u003Cli>Mobile money (Ghana)\u003C\u002Fli>\n\u003Cli>Masterpass (South Africa)\u003C\u002Fli>\n\u003Cli>EFT (South Africa)\u003C\u002Fli>\n\u003Cli>USSD (Nigeria)\u003C\u002Fli>\n\u003Cli>Visa QR (Nigeria)\u003C\u002Fli>\n\u003Cli>Many more coming soon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Why Paystack?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Start receiving payments instantly—go from sign-up to your first real transaction in as little as 15 minutes\u003C\u002Fli>\n\u003Cli>Simple, transparent pricing—no hidden charges or fees\u003C\u002Fli>\n\u003Cli>Modern, seamless payment experience via the Paystack Checkout — \u003Ca href=\"https:\u002F\u002Fpaystack.com\u002Fdemo\u002Fcheckout\" rel=\"nofollow ugc\">Try the demo!\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Advanced fraud detection\u003C\u002Fli>\n\u003Cli>Understand your customers better through a simple and elegant dashboard\u003C\u002Fli>\n\u003Cli>Access to attentive, empathetic customer support 24\u002F7\u003C\u002Fli>\n\u003Cli>Free updates as we launch new features and payment options\u003C\u002Fli>\n\u003Cli>Clearly documented APIs to build your custom payment experiences\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Over 60,000 businesses of all sizes in Nigeria, Ghana, Kenya, and South Africa rely on Paystack’s suite of products to receive payments and make payouts seamlessly. Sign up on \u003Ca href=\"https:\u002F\u002Fpaystack.com\u002Fsignup\" rel=\"nofollow ugc\">Paystack.com\u002Fsignup\u003C\u002Fa> to get started.\u003C\u002Fp>\n\u003Ch4>Note\u003C\u002Fh4>\n\u003Cp>This plugin is meant to be used by merchants in Ghana, Kenya, Nigeria and South Africa.\u003C\u002Fp>\n\u003Ch4>Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Accept payment\u003C\u002Fstrong> via Mastercard, Visa, Verve, USSD, Mobile Money, Bank Transfer, EFT, Bank Accounts, GTB 737 & Visa QR.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Seamless integration\u003C\u002Fstrong> into the WooCommerce checkout page. Accept payment directly on your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Refunds\u003C\u002Fstrong> from the WooCommerce order details page. Refund an order directly from the order details page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Recurring payment\u003C\u002Fstrong> using \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WooCommerce Subscriptions Integration\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> integration only works with \u003Cstrong>WooCommerce v2.6 and above\u003C\u002Fstrong> and \u003Cstrong>WooCommerce Subscriptions v2.0 and above\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>No subscription plans is created on Paystack. The \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> plugin handles all the subscription functionality.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If a customer pays for a subscription using a Mastercard or Visa card, their subscription will renew automatically throughout the duration of the subscription. If an automatic renewal fail their subscription will be put on-hold and they will have to login to their account to renew the subscription.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>For customers paying with a Verve card, their subscription can’t be renewed automatically, once a payment is due their subscription will be on-hold. The customer will have to login to his account to manually renew his subscription.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If a subscription has a free trial and no signup-fee, automatic renewal is not possible for the first payment because the initial order total will be 0, after the free trial the subscription will be put on-hold. The customer will have to login to his account to renew his subscription. If a Mastercard or Visa card is used to renew the subscription subsequent renewals will be automatic throughout the duration of the subscription, if a Verve card is used automatic renewal isn’t possible.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Suggestions \u002F Feature Request\u003C\u002Fh4>\n\u003Cp>If you have suggestions or a new feature request, feel free to get in touch with me via the contact form on my website \u003Ca href=\"http:\u002F\u002Fbosun.me\u002Fget-in-touch\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can also follow me on Twitter! \u003Cstrong>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Ftubiz\" rel=\"nofollow ugc\">@tubiz\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n","Paystack for WooCommerce allows your WooCommerce store to accept secure payments from multiple local and global payment channels.",30000,432109,90,24,"2025-04-17T08:26:00.000Z","6.8.5","6.2",[52,53,54,22,23],"mastercard","payment-gateway","paystack","https:\u002F\u002Fpaystack.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-paystack.5.8.2.zip",100,{"slug":59,"name":60,"version":61,"author":60,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":13,"num_ratings":13,"last_updated":67,"tested_up_to":68,"requires_at_least":69,"requires_php":70,"tags":71,"homepage":73,"download_link":74,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"visa-acceptance-solutions","Visa Acceptance Solutions","2.1.1","https:\u002F\u002Fprofiles.wordpress.org\u002Fvisaacceptancesolutions\u002F","\u003Cp>This plugin integrates \u003Cstrong>Visa Acceptance Solutions\u003C\u002Fstrong> into your \u003Cstrong>WooCommerce\u003C\u002Fstrong> store, offering multiple payment methods such as Card Payments, Apple Pay, Google Pay, Click to Pay, and Paze.\u003Cbr \u002F>\nSecurely store customer payment details with our Token Management Services.\u003Cbr \u002F>\nUtilize Cybersource’s fraud prevention services to process transactions safely.\u003Cbr \u002F>\nCompatible with \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Privacy Policy and Terms of Service\u003C\u002Fh3>\n\u003Cp>Refer to \u003Ca href=\"https:\u002F\u002Fwww.visaacceptance.com\u002Fen-gb\u002Fbecome-a-partner\u002Fmerchant-agreement.html\" rel=\"nofollow ugc\">Terms of Service\u003C\u002Fa>\u003Cbr \u002F>\nRefer to \u003Ca href=\"https:\u002F\u002Fwww.visa.co.uk\u002Flegal\u002Fglobal-privacy-notice.html\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch3>Admin Notice\u003C\u002Fh3>\n\u003Cp>Version 2.1.1 is now available.  Please refer to change log for details.\u003C\u002Fp>\n","Accept payments securely with Visa Acceptance Solutions.",10000,56918,"2026-02-23T16:04:00.000Z","6.9.4","6.9","8.2.0",[72,22,23],"payments","","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fvisa-acceptance-solutions.2.1.1.zip",{"slug":76,"name":77,"version":78,"author":79,"author_profile":80,"description":81,"short_description":82,"active_installs":83,"downloaded":84,"rating":85,"num_ratings":86,"last_updated":87,"tested_up_to":88,"requires_at_least":89,"requires_php":17,"tags":90,"homepage":73,"download_link":94,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"easypay-gateway-checkout-wc","easypay Gateway Checkout for WooCommerce","1.1.4","easypay","https:\u002F\u002Fprofiles.wordpress.org\u002Feasypay2023\u002F","\u003Cp>Plugin para aceitar pagamentos via Multibanco, MB Way, Cartão Visa e Mastercard, Débitos Diretos, Santander Consumer, Universo Flex, IBAN Digital e Apple Pay.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cp>O plugin oferece aos clientes a possibilidade de utilizar novos métodos de pagamento. Além disso, o plugin atualiza automaticamente o estado do pedido assim que o pagamento é efetuado, bem como o stock do produto.\u003Cbr \u002F>\nUtiliza um checkout final onde os clientes podem escolher por que método de pagamento querem pagar.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Capacidade de gerar referências Multibanco\u003C\u002Fli>\n\u003Cli>Pagamentos por Cartão Visa e Mastercard\u003C\u002Fli>\n\u003Cli>Pagamentos por MB Way\u003C\u002Fli>\n\u003Cli>Pagamentos por Santander Consumer\u003C\u002Fli>\n\u003Cli>Pagamentos por Débito Direto\u003C\u002Fli>\n\u003Cli>Pagamentos por IBAN Digital\u003C\u002Fli>\n\u003Cli>Pagamentos Universo Flex\u003C\u002Fli>\n\u003Cli>Pagamentos por Apple Pay\u003C\u002Fli>\n\u003Cli>Pagamentos por Google Pay\u003C\u002Fli>\n\u003C\u002Ful>\n","Plugin para aceitar pagamentos via Multibanco, MBWay, Visa e Mastercard, Débitos Diretos, Santander Consumer, Universo Flex, IBAN Digital e Apple Pay.",600,4065,60,2,"2025-03-06T01:45:00.000Z","6.4.8","6.0",[91,92,93,22,23],"mbway","multibanco","payment","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasypay-gateway-checkout-wc.1.1.4.zip",{"slug":96,"name":97,"version":98,"author":99,"author_profile":100,"description":101,"short_description":102,"active_installs":57,"downloaded":103,"rating":57,"num_ratings":31,"last_updated":104,"tested_up_to":49,"requires_at_least":105,"requires_php":17,"tags":106,"homepage":110,"download_link":111,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"payments-hubtel","Payments for Hubtel","1.0.1","Kwame Twum","https:\u002F\u002Fprofiles.wordpress.org\u002Fkmtwum\u002F","\u003Cp>NOTE: This plugin is in no way affiliated with Hubtel. It’s developed by an independent developer.\u003Cbr \u002F>\nAll issues encountered must be addressed to the developer and not Hubtel.\u003C\u002Fp>\n\u003Cp>Contact the developer at: \u003Ca href=\"mailto:support@geniustechhub.com\" rel=\"nofollow ugc\">support@geniustechhub.com\u003C\u002Fa>\u003Cbr \u002F>\nThis plugin helps you integrate \u003Cstrong>\u003Ca href=\"https:\u002F\u002Fdevelopers.hubtel.com\" rel=\"nofollow ugc\">Hubtel\u003C\u002Fa>\u003C\u002Fstrong> as a payment gateway for your Woocommerce\u002FWordPress website.\u003Cbr \u002F>\nYour customers will be able to pay you with any mobile money wallet and bank card issued in Ghana.\u003C\u002Fp>\n\u003Cp>It’s an easy way to accept payment on your website that runs on WordPress\u002FWoocommerce.\u003C\u002Fp>\n\u003Ch3>Dependency\u003C\u002Fh3>\n\u003Cp>This plugin relies on __\u003Ca href=\"https:\u002F\u002Fexcelliumgh.com\u002Fcdn\u002Fplugins\u002Fwoo-hubtel\u002F\" rel=\"nofollow ugc\">Excellium\u003C\u002Fa> for payment submission, verifications and SMS delivery;\u003Cbr \u002F>\n__\u003Ca href=\"https:\u002F\u002Fexcelliumgh.com\u002Fcdn\u002Fplugins\u002Fwoo-hubtel\u002Fprivacy\" rel=\"nofollow ugc\">Privacy Policy\u003C\u002Fa>\u003C\u002Fp>\n","Accept payments on your WooCommerce powered website directly to your Hubtel account.",1843,"2025-10-29T23:00:00.000Z","6.3",[107,108,109,22,23],"ghana","hubtel","mobile-money","https:\u002F\u002Fgithub.com\u002Fkmtwum\u002Fhubtel-payments","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpayments-hubtel.1.0.1.zip",{"slug":113,"name":114,"version":115,"author":116,"author_profile":117,"description":118,"short_description":119,"active_installs":57,"downloaded":120,"rating":13,"num_ratings":13,"last_updated":121,"tested_up_to":49,"requires_at_least":122,"requires_php":123,"tags":124,"homepage":127,"download_link":128,"security_score":57,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"paysuite-payment-gateway-for-woocommerce","Payment Gateway – Paysuite for WooCommerce","2.2.0","paysuite","https:\u002F\u002Fprofiles.wordpress.org\u002Fpaysuite\u002F","\u003Cp>Este plugin permite que você receba pagamentos por meio de Mpesa, Emola, Mkesh e Cartão de Crédito\u002FDébito em sua loja WooCommerce. Ele é integrado ao PaySuite, um provedor de pagamentos online em Moçambique.\u003C\u002Fp>\n\u003Ch3>Pré requisitos\u003C\u002Fh3>\n\u003Cp>Para usar o plugin é necessário:\u003Cbr \u002F>\n* Ter \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fwoocommerce\" rel=\"ugc\">WooCommerce\u003C\u002Fa> instalado.\u003Cbr \u002F>\n* Criar uma conta no \u003Ca href=\"https:\u002F\u002Fpaysuite.co.mz\u002F\" rel=\"nofollow ugc\">Paysuite.co.mz\u003C\u002Fa> onde irá obter as credenciais necessárias para configurar a conta.\u003C\u002Fp>\n\u003Ch3>Dúvidas\u003C\u002Fh3>\n\u003Cp>Se tiver  alguma dúvida :\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Visite a nossa sessão de \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpaysuite-payment-gateway-for-woocommerce#faq\" rel=\"ugc\">Perguntas Frequentes\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Crie um tópico no \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fsupport\u002Fplugin\u002Fpaysuite-payment-gateway-for-woocommerce\u002F\" rel=\"ugc\">fórum de ajuda do WordPress\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>Entrar em contacto com a equipe do PaySuite pelo site.\u003C\u002Fli>\n\u003Cli>Aceda ao nosso \u003Ca href=\"https:\u002F\u002Fchat.whatsapp.com\u002FHuI53kSqiq52QLehi4jkpH\" rel=\"nofollow ugc\">Grupo do WhatsApp\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n","Adiciona Mpesa e Emola como método de pagamento no WooCommerce.",3608,"2025-09-17T12:54:00.000Z","5.0","8.1",[125,126,53,22,23],"emola","mpesa","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fpaysuite-payment-gateway-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpaysuite-payment-gateway-for-woocommerce.zip",{"attackSurface":130,"codeSignals":199,"taintFlows":221,"riskAssessment":262,"analyzedAt":279},{"hooks":131,"ajaxHandlers":195,"restRoutes":196,"shortcodes":197,"cronEvents":198,"entryPointCount":13,"unprotectedCount":13},[132,139,143,148,152,155,159,163,167,171,177,181,185,188,191],{"type":133,"name":134,"callback":135,"priority":136,"file":137,"line":138},"action","woocommerce_rest_checkout_process_payment_with_context","failed_payment_notice",8,"includes\\class-wc-gateway-credo-blocks-support.php",23,{"type":133,"name":140,"callback":141,"file":137,"line":142},"wc_gateway_credo_process_payment_error","closure",94,{"type":133,"name":144,"callback":145,"file":146,"line":147},"admin_enqueue_scripts","admin_scripts","includes\\class-wc-gateway-credo.php",230,{"type":133,"name":149,"callback":150,"file":146,"line":151},"wp_enqueue_scripts","payment_scripts",231,{"type":133,"name":153,"callback":153,"file":146,"line":154},"admin_notices",233,{"type":133,"name":156,"callback":157,"file":146,"line":158},"woocommerce_api_wc_gateway_credo","verify_credo_transaction",245,{"type":133,"name":160,"callback":161,"file":146,"line":162},"woocommerce_api_tbz_wc_credo_webhook","process_webhooks",248,{"type":133,"name":153,"callback":164,"file":165,"line":166},"tbz_wc_credo_wc_missing_notice","woo-credo.php",39,{"type":133,"name":168,"callback":169,"file":165,"line":170},"admin_init","tbz_wc_credo_testmode_notice",43,{"type":172,"name":173,"callback":174,"priority":175,"file":165,"line":176},"filter","woocommerce_payment_gateways","tbz_wc_add_credo_gateway",99,47,{"type":133,"name":178,"callback":179,"priority":175,"file":165,"line":180},"plugins_loaded","tbz_wc_credo_init",52,{"type":133,"name":182,"callback":183,"file":165,"line":184},"disable-credo-test-mode","anonymous",131,{"type":133,"name":186,"callback":141,"file":165,"line":187},"before_woocommerce_init",135,{"type":133,"name":189,"callback":141,"file":165,"line":190},"woocommerce_blocks_payment_method_type_registration",152,{"type":133,"name":192,"callback":193,"file":165,"line":194},"woocommerce_blocks_loaded","tbz_wc_gateway_credo_woocommerce_block_support",161,[],[],[],[],{"dangerousFunctions":200,"sqlUsage":201,"outputEscaping":203,"fileOperations":31,"externalRequests":86,"nonceChecks":13,"capabilityChecks":13,"bundledLibraries":220},[],{"prepared":13,"raw":13,"locations":202},[],{"escaped":11,"rawEcho":204,"locations":205},7,[206,209,211,213,215,217,219],{"file":146,"line":207,"context":208},302,"raw output",{"file":146,"line":210,"context":208},362,{"file":146,"line":212,"context":208},583,{"file":146,"line":214,"context":208},894,{"file":146,"line":216,"context":208},896,{"file":146,"line":218,"context":208},899,{"file":165,"line":33,"context":208},[],[222,246],{"entryPoint":223,"graph":224,"unsanitizedCount":31,"severity":245},"verify_credo_transaction (includes\\class-wc-gateway-credo.php:909)",{"nodes":225,"edges":241},[226,231,235],{"id":227,"type":228,"label":229,"file":146,"line":230},"n0","source","$_REQUEST",923,{"id":232,"type":233,"label":234,"file":146,"line":230},"n1","transform","→ get_credo_transaction()",{"id":236,"type":237,"label":238,"file":146,"line":239,"wp_function":240},"n2","sink","wp_remote_get() [SSRF]",1369,"wp_remote_get",[242,244],{"from":227,"to":232,"sanitized":243},false,{"from":232,"to":236,"sanitized":243},"medium",{"entryPoint":247,"graph":248,"unsanitizedCount":86,"severity":245},"\u003Cclass-wc-gateway-credo> (includes\\class-wc-gateway-credo.php:0)",{"nodes":249,"edges":258},[250,252,253,254,256],{"id":227,"type":228,"label":229,"file":146,"line":251},914,{"id":232,"type":237,"label":238,"file":146,"line":239,"wp_function":240},{"id":236,"type":228,"label":229,"file":146,"line":230},{"id":255,"type":233,"label":234,"file":146,"line":230},"n3",{"id":257,"type":237,"label":238,"file":146,"line":239,"wp_function":240},"n4",[259,260,261],{"from":227,"to":232,"sanitized":243},{"from":236,"to":255,"sanitized":243},{"from":255,"to":257,"sanitized":243},{"summary":263,"deductions":264},"The credo-payment-forms plugin, version 2.0.2, exhibits a mixed security posture. On the positive side, it demonstrates good practices by not exposing a significant attack surface, with no AJAX handlers, REST API routes, shortcodes, or cron events found in the static analysis. Furthermore, all SQL queries are secured using prepared statements, and there is no recorded vulnerability history, suggesting a generally stable and secure development over time.\n\nHowever, several areas raise concerns. The plugin has a relatively low percentage of properly escaped output (59%), indicating a potential for cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled rigorously across all output points. The presence of two flows with unsanitized paths in the taint analysis, while not classified as critical or high severity, warrants attention as these could be entry points for path traversal or other file-related attacks, especially given that a file operation is present. The complete lack of nonce and capability checks, particularly in conjunction with file operations or external HTTP requests, represents a significant oversight in securing sensitive actions.\n\nIn conclusion, while the plugin avoids common pitfalls like unpatched CVEs and raw SQL queries, the significant portion of unescaped output, unsanitized paths, and the absence of fundamental security checks like nonces and capability checks create notable vulnerabilities. The strengths lie in its limited attack surface and proper SQL handling, but these are overshadowed by potential XSS and file-related risks, and the lack of authorization controls.",[265,268,270,272,274,276],{"reason":266,"points":267},"Unescaped output is a significant concern.",12,{"reason":269,"points":11},"Taint flows with unsanitized paths are a risk.",{"reason":271,"points":136},"Absence of nonce checks.",{"reason":273,"points":136},"Absence of capability checks.",{"reason":275,"points":204},"File operation without authorization checks.",{"reason":277,"points":278},"External HTTP requests without authorization.",6,"2026-03-16T23:44:06.690Z",{"wat":281,"direct":290},{"assetPaths":282,"generatorPatterns":285,"scriptPaths":286,"versionParams":287},[283,284],"\u002Fwp-content\u002Fplugins\u002Fcredo-payment-forms\u002Fincludes\u002Fjs\u002Fcredo-gateway-main.js","\u002Fwp-content\u002Fplugins\u002Fcredo-payment-forms\u002Fincludes\u002Fcss\u002Fcredo-gateway.css",[],[],[288,289],"credo-payment-forms\u002Fincludes\u002Fjs\u002Fcredo-gateway-main.js?ver=","credo-payment-forms\u002Fincludes\u002Fcss\u002Fcredo-gateway.css?ver=",{"cssClasses":291,"htmlComments":293,"htmlAttributes":294,"restEndpoints":297,"jsGlobals":298,"shortcodeOutput":300},[292],"credo-payment-gateway-form",[],[295,296],"data-credo-public-key","data-credo-test-mode",[],[299],"credo_gateway_params",[]]