[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$feOAT7DaKtHX-prIz7WnoLssgcEETmbQBBOR-SjXU7Lw":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":18,"download_link":25,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"vulnerabilities":30,"developer":31,"crawl_stats":28,"alternatives":38,"analysis":116,"fingerprints":489},"e-transactions-wc","Up2pay e-Transactions WooCommerce Payment Gateway","3.0.9","Verifone e-commerce","https:\u002F\u002Fprofiles.wordpress.org\u002Fpaybox\u002F","\u003Cp>This module adds a Up2pay e-Transactions Payment Gateway to your Installation of WooCommerce.\u003C\u002Fp>\n\u003Cp>Up2pay e-Transactions is a Payment Services Provider in Europe, part of the Crédit Agricole Bank.\u003C\u002Fp>\n\u003Cp>plugin actions in wordpress:\u003C\u002Fp>\n\u003Cp>this plugin offers an admin panel from the order section to the settings of Woocommerce.\u003Cbr \u002F>\nit adds payment information to the orders details and changes the status of orders (upon reception of an IPN, see below.) and adds payment means on the checkout page.\u003C\u002Fp>\n\u003Cp>This plugin takes information from the order and creates a form containing the details of the payment to be made, including parameters configured in the admin panel of the module that identify the mechant.\u003C\u002Fp>\n\u003Cp>The plugin checks for availability of the Up2pay e-Transactions platform, through a call to our servers.\u003Cbr \u002F>\nIt then submits with javascript the form to the first available server.\u003C\u002Fp>\n\u003Cp>the customer is then presented with a payment page, hosted on the Up2pay e-Transactions Platform (urls above).\u003C\u002Fp>\n\u003Cp>The Up2pay e-Transactions Platform sends an Instant Payment Notification (IPN) to the server when the customer actually made the payment, indicating to the merchant the status of the payment.\u003C\u002Fp>\n\u003Cp>the plugin generates a url that can catch the IPN call from Up2pay e-Transactions’s server, filtering incoming calls to the Up2pay e-Transactions IP address.\u003C\u002Fp>\n\u003Cp>if payment is successfull, then the plugin validates the order though woocommerce.\u003C\u002Fp>\n","This plugin is a Up2pay e-Transactions payment gateway for WooCommerce 4.x",4000,76307,46,13,"2025-05-19T13:31:00.000Z","6.8.5","5.0.0","",[20,21,22,23,24],"e-commerce","orders","payment","payment-gateway","woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fe-transactions-wc.3.0.9.zip",100,0,null,"2026-03-15T15:16:48.613Z",[],{"slug":32,"display_name":7,"profile_url":8,"plugin_count":33,"total_installs":34,"avg_security_score":26,"avg_patch_time_days":35,"trust_score":36,"computed_at":37},"paybox",3,4600,30,94,"2026-04-03T19:21:44.483Z",[39,53,63,80,99],{"slug":40,"name":41,"version":42,"author":7,"author_profile":8,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":17,"requires_php":18,"tags":51,"homepage":18,"download_link":52,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"paybox-woocommerce-gateway","Paybox WooCommerce Payment Gateway","0.9.9.8","\u003Cp>This module adds a Paybox Payment Gateway to your Installation of WooCommerce.\u003C\u002Fp>\n\u003Cp>Paybox is a Payment Services Provider in Europe, part of the Verifone Group.\u003C\u002Fp>\n\u003Cp>plugin actions in wordpress:\u003C\u002Fp>\n\u003Cp>this plugin offers an admin panel from the order section to the settings of Woocommerce.\u003Cbr \u002F>\nit adds payment information to the orders details and changes the status of orders (upon reception of an IPN, see below.) and adds payment means on the checkout page.\u003C\u002Fp>\n\u003Cp>This plugin takes information from the order and creates a form containing the details of the payment to be made, including parameters configured in the admin panel of the module that identify the mechant.\u003C\u002Fp>\n\u003Cp>The plugin checks for availability of the Paybox platform, through a call to our servers.\u003Cbr \u002F>\nIt then submits with javascript the form to the first available server.\u003C\u002Fp>\n\u003Cp>the customer is then presented with a payment page, hosted on the Paybox Platform (urls above).\u003C\u002Fp>\n\u003Cp>The Paybox Platform sends an Instant Payment Notification (IPN) to the server when the customer actually made the payment, indicating to the merchant the status of the payment.\u003C\u002Fp>\n\u003Cp>the plugin generates a url that can catch the IPN call from Paybox’s server, filtering incoming calls to the Paybox IP address.\u003C\u002Fp>\n\u003Cp>if payment is successfull, then the plugin validates the order though woocommerce.\u003C\u002Fp>\n","This plugin is a Paybox payment gateway for WooCommerce 4.x",500,22232,60,4,"2026-01-20T14:37:00.000Z","6.9.4",[20,21,22,23,24],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpaybox-woocommerce-gateway.0.9.9.8.zip",{"slug":54,"name":55,"version":56,"author":7,"author_profile":8,"description":57,"short_description":58,"active_installs":26,"downloaded":59,"rating":27,"num_ratings":27,"last_updated":60,"tested_up_to":50,"requires_at_least":17,"requires_php":18,"tags":61,"homepage":18,"download_link":62,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"wc-sofinco-3xcb","Sofinco 3XCB","0.9.9.7","\u003Cp>This module adds a Sofinco Payment Gateway to your Installation of WooCommerce.\u003C\u002Fp>\n\u003Cp>Sofinco is a Payment Services Provider in Europe, part of the Verifone Group.\u003C\u002Fp>\n\u003Cp>plugin actions in wordpress:\u003C\u002Fp>\n\u003Cp>this plugin offers an admin panel from the order section to the settings of Woocommerce.\u003Cbr \u002F>\nit adds payment information to the orders details and changes the status of orders (upon reception of an IPN, see below.) and adds payment means on the checkout page.\u003C\u002Fp>\n\u003Cp>This plugin takes information from the order and creates a form containing the details of the payment to be made, including parameters configured in the admin panel of the module that identify the mechant.\u003C\u002Fp>\n\u003Cp>The plugin checks for availability of the Sofinco platform, through a call to our servers.\u003Cbr \u002F>\nIt then submits with javascript the form to the first available server.\u003C\u002Fp>\n\u003Cp>the customer is then presented with a payment page, hosted on the Sofinco Platform (urls above).\u003C\u002Fp>\n\u003Cp>The Sofinco Platform sends an Instant Payment Notification (IPN) to the server when the customer actually made the payment, indicating to the merchant the status of the payment.\u003C\u002Fp>\n\u003Cp>the plugin generates a url that can catch the IPN call from Sofinco’s server, filtering incoming calls to the Sofinco IP address.\u003C\u002Fp>\n\u003Cp>if payment is successfull, then the plugin validates the order though woocommerce.\u003C\u002Fp>\n","This plugin is a Sofinco 3x CB payment gateway for WooCommerce",6615,"2026-01-20T15:04:00.000Z",[20,21,22,23,24],"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-sofinco-3xcb.0.9.9.7.zip",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":27,"num_ratings":27,"last_updated":73,"tested_up_to":50,"requires_at_least":74,"requires_php":75,"tags":76,"homepage":18,"download_link":79,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"hyperpay-gateways","HyperPay Payments","6.3.5","HyperPay","https:\u002F\u002Fprofiles.wordpress.org\u002Fhyperpayproducts\u002F","\u003Cp>Payments Gateways provided by Gate2Play, to make you able to add Credit Card, Mada, STCpay and more payments method.\u003Cbr \u002F>\nto be able to use this plugin, you should be one of HyperPay’s customers.\u003Cbr \u002F>\nvisit https:\u002F\u002Fhyperpay.com for more information.\u003C\u002Fp>\n\u003Cp>The data extracted is quite sensitive and contains information that may be used to check the vulnerability of your WordPress site. Be wary of you share this data with.\u003C\u002Fp>\n\u003Ch3>Compatibility\u003C\u002Fh3>\n\u003Cp>The plugin has been tested with\u003Cbr \u002F>\nWC 8.3.1\u003Cbr \u002F>\nwordpress 6.9\u003Cbr \u002F>\nPHP 7.2\u003C\u002Fp>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>This plugin connects to the Hyperpay API to process payments and check transaction status.\u003Cbr \u002F>\n– Data sent: Payment details, order information, and merchant credentials are sent when processing payments.\u003Cbr \u002F>\n– When: Data is sent when a customer initiates a payment or when the plugin checks payment status.\u003Cbr \u002F>\n– Service: Hyperpay https:\u002F\u002Foppwa.com\u003Cbr \u002F>\n– Terms of Service: https:\u002F\u002Fwww.aciworldwide.com\u002Fterms-of-use\u003Cbr \u002F>\n– Privacy Policy: https:\u002F\u002Fwww.aciworldwide.com\u002Fprivacy-policy\u003C\u002Fp>\n\u003Ch3>Third Party Libraries\u003C\u002Fh3>\n\u003Cp>This plugin includes or depends on the following third-party libraries via Composer. All libraries are licensed under GPL-compatible licenses:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\n\u003Cp>\u003Cstrong>symfony\u002Fpolyfill-php80\u003C\u002Fstrong> (MIT License)\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fsymfony\u002Fpolyfill-php80\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>psr\u002Flog\u003C\u002Fstrong> (MIT License)\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fphp-fig\u002Flog\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>guzzlehttp\u002Fguzzle\u003C\u002Fstrong> (MIT License)\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Fguzzle\u002Fguzzle\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>twig\u002Ftwig\u003C\u002Fstrong> (BSD-3-Clause License)\u003Cbr \u002F>\nhttps:\u002F\u002Fgithub.com\u002Ftwigphp\u002FTwig\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>For details, see each library’s LICENSE file in the \u003Ccode>vendor\u002F\u003C\u002Fcode> directory or their respective repositories.\u003C\u002Fp>\n\u003Ch3>Source Code\u003C\u002Fh3>\n\u003Cp>The uncompressed source code for compiled assets (e.g., JavaScript and CSS) is available in the \u003Ccode>\u002Fsrc\u002Fassets\u002F\u003C\u002Fcode> directory.\u003C\u002Fp>\n\u003Cp>Build tools used:\u003Cbr \u002F>\n– Node.js\u003Cbr \u002F>\n– Webpack\u003C\u002Fp>\n\u003Cp>To build:\u003Cbr \u002F>\n1. Run \u003Ccode>npm install\u003C\u002Fcode>\u003Cbr \u002F>\n2. Run \u003Ccode>npm run build\u003C\u002Fcode>\u003C\u002Fp>\n","Payments Gateways provided by Gate2Play, to make you able to add Credit Card, Mada, STCpay and more payments method.",600,14087,"2026-02-27T18:09:00.000Z","5.3","7.1",[20,77,78,23,24],"gate2play","merchant","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhyperpay-gateways.6.3.6.zip",{"slug":81,"name":82,"version":83,"author":84,"author_profile":85,"description":86,"short_description":87,"active_installs":88,"downloaded":89,"rating":35,"num_ratings":90,"last_updated":91,"tested_up_to":50,"requires_at_least":92,"requires_php":93,"tags":94,"homepage":97,"download_link":98,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"kueskipay-gateway","KueskiPay Gateway","2.4.1","edgarnomesque","https:\u002F\u002Fprofiles.wordpress.org\u002Fedgarnomesque\u002F","\u003Cp>Choose how many fortnights to pay with Kueski Pay\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress 6.2 or newer.\u003C\u002Fli>\n\u003Cli>WooCommerce 7.6 or newer.\u003C\u002Fli>\n\u003Cli>PHP 7.4 or newer is recommended.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Notices\u003C\u002Fh3>\n\u003Cp>This plugin connects to a third-party services to perform its functions. Below are the circunstances under wich these connections are made:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\n\u003Cp>\u003Cstrong>CDN Service for Promotional Widgets\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service Name:\u003C\u002Fstrong> KueskiPay CDN\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Description:\u003C\u002Fstrong> This plugin uses the CDN service at https:\u002F\u002Fcdn.kueskipay.com\u002F to display promotional widgets on the product and cart pages in WooCommerce.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> The following data is sent to this service via GET request:\n\u003Cul>\n\u003Cli>\u003Cstrong>Authorization:\u003C\u002Fstrong> The public key provided at the time of integration.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Integration:\u003C\u002Fstrong> The platform being integrated, in this case, WooCommerce.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Version:\u003C\u002Fstrong> The current version of this plugin.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Sandbox:\u003C\u002Fstrong> Indicates whether the current environment is sandbox or production.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Service URL:\u003C\u002Fstrong> https:\u002F\u002Fcdn.kueskipay.com\u002Fwidgets.js\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Example URL:\u003C\u002Fstrong> https:\u002F\u002Fcdn.kueskipay.com\u002Fwidgets.js?authorization=[public_key]&integration=woocommerce&version=[plugin_version]&sandbox[true\u002Ffalse]\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Files Involved:\u003C\u002Fstrong> public\u002Fclass-wc-kuesku-gategay-public.php (Line 227)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use and Policy:\u003C\u002Fstrong> https:\u002F\u002Fpreguntas.frecuentes.kueski.com\u002Fhc\u002Fes\u002Farticles\u002F12385599806747-PRIVACY-NOTICE-FOR-THIRD-PARTIES-AND-COMMERCIAL-ALLIES-OF-KUESKI-SAPI-DE-CV-SOFOM-ENR\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>\u003Cstrong>Payment Order Creation and Management\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Service Name:\u003C\u002Fstrong> KueskiPay Payment API\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Description:\u003C\u002Fstrong> This plugin uses the following services to create and manage payment orders:\n\u003Cul>\n\u003Cli>\u003Cstrong>Sandbox:\u003C\u002Fstrong> https:\u002F\u002Fwoocommerce-middleware-go.staging-pay.kueski.codes\u002Fapi\u002Fv1\u002Forder\u002Fcreate\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Production:\u003C\u002Fstrong> https:\u002F\u002Fwoocommerce-middleware-go.production-pay.kueski.com\u002Fapi\u002Fv1\u002Forder\u002Fcreate\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Usage:\u003C\u002Fstrong> The plugin sends the current cart order details to create an order and then redirects the user to the service site to complete their payment.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Data Sent:\u003C\u002Fstrong> The following data is sent to this service:\n\u003Cul>\n\u003Cli>\u003Cstrong>Order Description\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Order Amounts:\u003C\u002Fstrong> total, shipping, discounts and taxes.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Order Items:\u003C\u002Fstrong> Details of each order item.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Shipping Address:\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Billing Address:\u003C\u002Fstrong>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Files Involved:\u003C\u002Fstrong> includes\u002Fclass-wc-kueski-gateway-api.php (Lines 57, 92, 151, 221)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use and Privacy Policy:\u003C\u002Fstrong> https:\u002F\u002Fpreguntas.frecuentes.kueski.com\u002Fhc\u002Fes\u002Farticles\u002F12385430001563-Aviso-de-privacidad-integral-para-clientes-y-usuarios-de-Kueski-S-A-P-I-de-C-V-SOFOM-E-N-R\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Fol>\n","Add Kueski gateway to buy now and pay later on your store.",200,3906,2,"2026-01-19T17:17:00.000Z","6.2","7.4",[20,95,96,23,24],"ecommerce","kueski","https:\u002F\u002Fwww.kueskipay.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fkueskipay-gateway.2.4.1.zip",{"slug":100,"name":101,"version":102,"author":103,"author_profile":104,"description":105,"short_description":106,"active_installs":107,"downloaded":108,"rating":26,"num_ratings":109,"last_updated":110,"tested_up_to":16,"requires_at_least":111,"requires_php":112,"tags":113,"homepage":18,"download_link":115,"security_score":26,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"avify","Avify","1.3.8","Alexis Valenciano","https:\u002F\u002Fprofiles.wordpress.org\u002Favify\u002F","\u003Cp>\u003Ca href=\"https:\u002F\u002Favify.com\u002F?utm_source=WP.PLUGIN.PAGE&utm_medium=LINK.WEB\" rel=\"nofollow ugc\">Avify is a platform that gives you a WhatsApp CRM\u003C\u002Fa>, an online store (or connection to an existing one), and a point of sale system for physical stores, all in one place.\u003C\u002Fp>\n\u003Cp>By using \u003Ca href=\"https:\u002F\u002Favify.com\u002F?utm_source=WP.PLUGIN.PAGE&utm_medium=LINK.WEB\" rel=\"nofollow ugc\">Avify\u003C\u002Fa>, SMBs do not have to worry about maintaining inventory control manually since all sales channels affect a single centralized inventory.\u003C\u002Fp>\n\u003Cp>With our technology you can receive orders and payments coming from WordPress and merge them with any other one coming from social media interaction like Instagram, Facebook or WhatsApp. You can connect your logistics, payment and billing services so that any order that enters the business can process shipping price calculations, payment or transfer receipts, and receipts or invoices automatically.\u003C\u002Fp>\n\u003Cp>With our plugin you will be able to sync orders and online payments in WooCommerce via Avify Integration. Also, you can connect multiple card payment systems and \u003Ca href=\"https:\u002F\u002Favify.com\u002F?utm_source=WP.PLUGIN.PAGE&utm_medium=LINK.WEB\" rel=\"nofollow ugc\">Avify\u003C\u002Fa> displays them at your checkout.\u003C\u002Fp>\n\u003Cp>Contact your dedicated support channel to get your API Key and the ID of your store.\u003C\u002Fp>\n\u003Ch4>Multiple currencies\u003C\u002Fh4>\n\u003Cp>Process payments and display prices in USD, CRC, MXN.\u003C\u002Fp>\n\u003Ch4>Current version features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Customer data and card encryption.\u003C\u002Fli>\n\u003Cli>Processing of payments in USD or CRC.\u003C\u002Fli>\n\u003Cli>Sandbox testing.\u003C\u002Fli>\n\u003Cli>Synchronize orders\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Do you want to know more about Avify? Please visit our \u003Ca href=\"https:\u002F\u002Favify.com\u002F?utm_source=WP.PLUGIN.PAGE&utm_medium=LINK.WEB\" rel=\"nofollow ugc\">website\u003C\u002Fa> and find out what we can do.\u003C\u002Fp>\n","Connect your WooCommerce account to Avify and send all your orders to one centralized inventory.",80,5649,1,"2026-02-12T20:13:00.000Z","5.6","7.0",[100,114,21,23,24],"checkout","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Favify.1.3.8.zip",{"attackSurface":117,"codeSignals":249,"taintFlows":405,"riskAssessment":481,"analyzedAt":488},{"hooks":118,"ajaxHandlers":231,"restRoutes":246,"shortcodes":247,"cronEvents":248,"entryPointCount":48,"unprotectedCount":27},[119,125,130,135,138,142,146,150,154,159,162,166,170,174,177,179,181,185,187,191,195,197,199,202,205,209,211,213,217,221,225,227,228],{"type":120,"name":121,"callback":122,"file":123,"line":124},"action","wp_enqueue_scripts","enqueue_scripts_styles","classes\\wc-etransactions-front.php",19,{"type":126,"name":127,"callback":128,"file":123,"line":129},"filter","woocommerce_account_menu_items","add_account_menu_items",20,{"type":120,"name":131,"callback":132,"file":133,"line":134},"plugins_loaded","payment_gateway_init","classes\\wc-etransactions-gateways.php",21,{"type":120,"name":136,"callback":122,"file":133,"line":137},"admin_enqueue_scripts",22,{"type":120,"name":139,"callback":140,"file":133,"line":141},"woocommerce_blocks_loaded","blocks_support",23,{"type":120,"name":143,"callback":144,"file":133,"line":145},"admin_notices","woocommerce_missing_notice",33,{"type":126,"name":147,"callback":148,"file":133,"line":149},"woocommerce_payment_gateways","add_gateways",44,{"type":120,"name":151,"callback":152,"file":133,"line":153},"woocommerce_blocks_payment_method_type_registration","closure",70,{"type":120,"name":155,"callback":156,"file":157,"line":158},"admin_menu","add_menu_page","classes\\wc-etransactions-list-transaction.php",15,{"type":120,"name":136,"callback":160,"file":157,"line":161},"enqueue_styles",16,{"type":120,"name":163,"callback":164,"file":157,"line":165},"admin_post_reset_filters","reset_filters",17,{"type":126,"name":167,"callback":168,"file":169,"line":165},"wc_order_statuses","register_order_status","classes\\wc-etransactions-order.php",{"type":126,"name":171,"callback":172,"file":169,"line":173},"woocommerce_register_shop_order_post_statuses","register_order_post_status",18,{"type":126,"name":175,"callback":176,"file":169,"line":124},"woocommerce_analytics_excluded_order_statuses","append_draft_order_post_status",{"type":126,"name":178,"callback":176,"file":169,"line":129},"woocommerce_valid_order_statuses_for_payment",{"type":126,"name":180,"callback":176,"file":169,"line":134},"woocommerce_valid_order_statuses_for_payment_complete",{"type":120,"name":182,"callback":183,"priority":184,"file":169,"line":137},"woocommerce_order_status_changed","status_changed",10,{"type":120,"name":186,"callback":186,"file":169,"line":141},"add_meta_boxes",{"type":120,"name":188,"callback":189,"file":169,"line":190},"woocommerce_new_order","save_shipping_address_on_order_creation",26,{"type":120,"name":192,"callback":193,"file":169,"line":194},"woocommerce_order_shipping_method_changed","save_shipping_address_on_shipping_method_change",27,{"type":120,"name":136,"callback":136,"file":196,"line":134},"classes\\wc-etransactions-settings.php",{"type":120,"name":155,"callback":198,"file":196,"line":137},"add_settings_menu",{"type":120,"name":200,"callback":201,"file":196,"line":141},"admin_init","save_settings_menu",{"type":120,"name":200,"callback":203,"priority":204,"file":196,"line":190},"maybe_redirect_to_onboarding",11,{"type":120,"name":206,"callback":207,"priority":208,"file":196,"line":194},"admin_footer","render_deactivate_popup",99,{"type":120,"name":143,"callback":152,"file":196,"line":210},173,{"type":120,"name":143,"callback":152,"file":196,"line":212},261,{"type":126,"name":214,"callback":215,"file":216,"line":145},"cron_schedules","crons_registrations","classes\\wc-etransactions-updater.php",{"type":120,"name":218,"callback":219,"file":216,"line":220},"wp","cron_events",34,{"type":120,"name":222,"callback":223,"file":216,"line":224},"init","update",35,{"type":120,"name":143,"callback":152,"file":226,"line":35},"wc-etransactions.php",{"type":120,"name":200,"callback":152,"file":226,"line":220},{"type":120,"name":222,"callback":229,"priority":109,"file":226,"line":230},"wc_etransactions_plugins_loaded",84,[232,237,240,243],{"action":233,"nopriv":234,"callback":233,"hasNonce":235,"hasCapCheck":234,"file":169,"line":236},"wc_etransactions_admin_single_order_submit",false,true,24,{"action":238,"nopriv":234,"callback":238,"hasNonce":235,"hasCapCheck":234,"file":169,"line":239},"wc_etransactions_admin_single_order_refund",25,{"action":241,"nopriv":234,"callback":242,"hasNonce":235,"hasCapCheck":234,"file":196,"line":236},"wc_etransactions_get_test_request","get_test_request",{"action":244,"nopriv":234,"callback":245,"hasNonce":235,"hasCapCheck":234,"file":196,"line":239},"wc_etransactions_get_log_file_content","get_log_file_content",[],[],[],{"dangerousFunctions":250,"sqlUsage":251,"outputEscaping":253,"fileOperations":35,"externalRequests":400,"nonceChecks":400,"capabilityChecks":90,"bundledLibraries":401},[],{"prepared":27,"raw":27,"locations":252},[],{"escaped":254,"rawEcho":255,"locations":256},330,76,[257,261,263,265,267,269,271,273,275,276,278,280,282,284,286,288,290,292,293,296,298,300,302,304,307,309,310,312,314,316,319,321,322,324,326,327,328,330,332,334,336,338,340,342,344,347,349,350,351,353,354,356,358,360,361,363,364,365,367,369,371,373,375,376,378,380,381,383,385,387,390,392,393,395,397,398],{"file":258,"line":259,"context":260},"classes\\helpers\\wc-etransaction-order-manager.php",109,"raw output",{"file":258,"line":262,"context":260},113,{"file":258,"line":264,"context":260},119,{"file":258,"line":266,"context":260},123,{"file":258,"line":268,"context":260},150,{"file":258,"line":270,"context":260},154,{"file":258,"line":272,"context":260},158,{"file":258,"line":274,"context":260},160,{"file":258,"line":88,"context":260},{"file":258,"line":277,"context":260},216,{"file":258,"line":279,"context":260},217,{"file":133,"line":281,"context":260},56,{"file":133,"line":283,"context":260},262,{"file":133,"line":285,"context":260},295,{"file":133,"line":287,"context":260},302,{"file":157,"line":289,"context":260},38,{"file":196,"line":291,"context":260},174,{"file":196,"line":283,"context":260},{"file":294,"line":295,"context":260},"payment-methods\\wc-etransactions-abstract-gateway-instalments.php",121,{"file":294,"line":297,"context":260},125,{"file":294,"line":299,"context":260},163,{"file":294,"line":301,"context":260},169,{"file":294,"line":303,"context":260},230,{"file":305,"line":306,"context":260},"payment-methods\\wc-etransactions-abstract-gateway.php",152,{"file":305,"line":308,"context":260},156,{"file":305,"line":88,"context":260},{"file":305,"line":311,"context":260},206,{"file":305,"line":313,"context":260},212,{"file":305,"line":315,"context":260},276,{"file":317,"line":318,"context":260},"templates\\admin\\deactivate-popup.php",12,{"file":320,"line":184,"context":260},"templates\\admin\\order\\payment-info.php",{"file":320,"line":124,"context":260},{"file":320,"line":323,"context":260},28,{"file":320,"line":325,"context":260},58,{"file":320,"line":107,"context":260},{"file":320,"line":230,"context":260},{"file":320,"line":329,"context":260},91,{"file":320,"line":331,"context":260},103,{"file":320,"line":333,"context":260},116,{"file":320,"line":335,"context":260},120,{"file":320,"line":337,"context":260},127,{"file":320,"line":339,"context":260},136,{"file":320,"line":341,"context":260},172,{"file":320,"line":343,"context":260},204,{"file":345,"line":346,"context":260},"templates\\admin\\page-settings\\account.php",171,{"file":348,"line":184,"context":260},"templates\\admin\\page-settings\\changelog.php",{"file":348,"line":204,"context":260},{"file":348,"line":141,"context":260},{"file":352,"line":184,"context":260},"templates\\admin\\page-settings\\demo-mode.php",{"file":352,"line":124,"context":260},{"file":355,"line":318,"context":260},"templates\\admin\\page-settings\\instalment.php",{"file":355,"line":357,"context":260},54,{"file":355,"line":359,"context":260},55,{"file":355,"line":230,"context":260},{"file":362,"line":141,"context":260},"templates\\admin\\page-settings\\intro.php",{"file":362,"line":359,"context":260},{"file":362,"line":281,"context":260},{"file":362,"line":366,"context":260},64,{"file":362,"line":368,"context":260},65,{"file":362,"line":370,"context":260},66,{"file":372,"line":318,"context":260},"templates\\admin\\page-settings\\payment.php",{"file":372,"line":374,"context":260},32,{"file":372,"line":145,"context":260},{"file":372,"line":377,"context":260},81,{"file":372,"line":379,"context":260},82,{"file":372,"line":331,"context":260},{"file":372,"line":382,"context":260},104,{"file":372,"line":384,"context":260},141,{"file":372,"line":386,"context":260},191,{"file":388,"line":389,"context":260},"templates\\admin\\page-settings\\popup\\config.php",6,{"file":388,"line":391,"context":260},29,{"file":388,"line":224,"context":260},{"file":388,"line":394,"context":260},67,{"file":388,"line":396,"context":260},69,{"file":388,"line":153,"context":260},{"file":226,"line":399,"context":260},31,5,[402],{"name":403,"version":28,"knownCves":404},"Select2",[],[406,423,433,443,462,472],{"entryPoint":407,"graph":408,"unsanitizedCount":109,"severity":422},"render_filters (classes\\helpers\\wc-etransaction-order-manager.php:142)",{"nodes":409,"edges":420},[410,415],{"id":411,"type":412,"label":413,"file":258,"line":414},"n0","source","$_GET",144,{"id":416,"type":417,"label":418,"file":258,"line":270,"wp_function":419},"n1","sink","echo() [XSS]","echo",[421],{"from":411,"to":416,"sanitized":234},"medium",{"entryPoint":424,"graph":425,"unsanitizedCount":90,"severity":422},"display_pagination (classes\\helpers\\wc-etransaction-order-manager.php:192)",{"nodes":426,"edges":431},[427,430],{"id":411,"type":412,"label":428,"file":258,"line":429},"$_GET (x2)",198,{"id":416,"type":417,"label":418,"file":258,"line":311,"wp_function":419},[432],{"from":411,"to":416,"sanitized":234},{"entryPoint":434,"graph":435,"unsanitizedCount":33,"severity":442},"\u003Cwc-etransaction-order-manager> (classes\\helpers\\wc-etransaction-order-manager.php:0)",{"nodes":436,"edges":440},[437,439],{"id":411,"type":412,"label":438,"file":258,"line":414},"$_GET (x3)",{"id":416,"type":417,"label":418,"file":258,"line":270,"wp_function":419},[441],{"from":411,"to":416,"sanitized":234},"low",{"entryPoint":444,"graph":445,"unsanitizedCount":141,"severity":442},"save_settings_menu (classes\\wc-etransactions-settings.php:134)",{"nodes":446,"edges":459},[447,450,453],{"id":411,"type":412,"label":448,"file":196,"line":449},"$_POST (x23)",179,{"id":416,"type":451,"label":452,"file":196,"line":449},"transform","→ wc_etransactions_update_option()",{"id":454,"type":417,"label":455,"file":456,"line":457,"wp_function":458},"n2","update_option() [Settings Manipulation]","global-functions.php",106,"update_option",[460,461],{"from":411,"to":416,"sanitized":234},{"from":416,"to":454,"sanitized":234},{"entryPoint":463,"graph":464,"unsanitizedCount":141,"severity":442},"\u003Cwc-etransactions-settings> (classes\\wc-etransactions-settings.php:0)",{"nodes":465,"edges":469},[466,467,468],{"id":411,"type":412,"label":448,"file":196,"line":449},{"id":416,"type":451,"label":452,"file":196,"line":449},{"id":454,"type":417,"label":455,"file":456,"line":457,"wp_function":458},[470,471],{"from":411,"to":416,"sanitized":234},{"from":416,"to":454,"sanitized":234},{"entryPoint":473,"graph":474,"unsanitizedCount":27,"severity":442},"\u003Cpayment-info> (templates\\admin\\order\\payment-info.php:0)",{"nodes":475,"edges":479},[476,478],{"id":411,"type":412,"label":477,"file":320,"line":318},"$_POST['wce_order_error']",{"id":416,"type":417,"label":418,"file":320,"line":318,"wp_function":419},[480],{"from":411,"to":416,"sanitized":235},{"summary":482,"deductions":483},"The e-transactions-wc plugin v3.0.9 demonstrates a generally strong security posture with robust practices in place. The static analysis reveals no direct SQL injection vulnerabilities due to the consistent use of prepared statements. Furthermore, the plugin has no recorded history of CVEs, suggesting a good track record of security awareness and maintenance. The presence of nonce and capability checks on all identified AJAX entry points is a significant strength, mitigating common attack vectors.\n\nHowever, there are areas for improvement. A concerning finding is the taint analysis, which shows 5 out of 6 analyzed flows with unsanitized paths. While these did not escalate to critical or high severity in this analysis, this indicates a potential for vulnerabilities if user-supplied data is not handled with extreme care throughout the code. The output escaping, while at 81%, still leaves a significant portion of outputs potentially vulnerable to cross-site scripting (XSS) attacks if user input is involved in those unescaped outputs.\n\nIn conclusion, e-transactions-wc v3.0.9 is well-protected against common direct injection and authentication bypass issues. The absence of past vulnerabilities is reassuring. The primary risk lies in the unsanitized data flows, which, despite not currently leading to exploitable vulnerabilities in this version, represent a latent risk that requires diligent developer attention. The moderate percentage of unescaped output also warrants careful review to prevent potential XSS.",[484,486],{"reason":485,"points":184},"Flows with unsanitized paths in taint analysis",{"reason":487,"points":400},"Unescaped output percentage is below ideal threshold","2026-03-16T18:12:39.766Z",{"wat":490,"direct":499},{"assetPaths":491,"generatorPatterns":494,"scriptPaths":495,"versionParams":496},[492,493],"\u002Fwp-content\u002Fplugins\u002Fe-transactions-wc\u002Fassets\u002Fbuild\u002Fcheckout-page.css","\u002Fwp-content\u002Fplugins\u002Fe-transactions-wc\u002Fassets\u002Fbuild\u002Fcheckout-page.js",[],[493],[497,498],"e-transactions-wc\u002Fassets\u002Fbuild\u002Fcheckout-page.css?ver=","e-transactions-wc\u002Fassets\u002Fbuild\u002Fcheckout-page.js?ver=",{"cssClasses":500,"htmlComments":502,"htmlAttributes":503,"restEndpoints":505,"jsGlobals":506,"shortcodeOutput":508},[501],"wc-etransactions-checkout-page",[],[504],"data-wc-etransactions-plugin-url",[],[507],"wc_etransactions",[]]