WP-Safety

Ecart Pay Security & Risk Analysis

wordpress.org/plugins/ecart-pay

Ecart Pay allows online merchants to quickly and securely accept payments through WooCommerce. With multiple payment options, this plugin is easy to s …

80 active installs v2.0.8 PHP 7.2+ WP 5.0+ Updated Feb 17, 2026
ecommercepayment-gatewaypaymentswoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is Ecart Pay Safe to Use in 2026?

Generally Safe

Score 100/100

Ecart Pay has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "ecart-pay" v2.0.8 plugin exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The absence of any recorded vulnerabilities, including CVEs, suggests a history of responsible development or effective patching. The code analysis reveals no critical security flaws like dangerous functions, raw SQL queries, or taint flows. The plugin also demonstrates good practices such as using prepared statements for all SQL queries and implementing nonce checks on its AJAX handlers, which helps mitigate common attack vectors.

Key Concerns

  • Lack of capability checks on entry points
  • Some unescaped output detected
  • External HTTP requests present
Vulnerabilities
None known

Ecart Pay Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Ecart Pay Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
7
34 escaped
Nonce Checks
2
Capability Checks
0
File Operations
0
External Requests
2
Bundled Libraries
0

Output Escaping

83% escaped41 total outputs
Attack Surface

Ecart Pay Attack Surface

Entry Points3
Unprotected0

AJAX Handlers 2

authwp_ajax_ecartpay_get_installmentsecartpay.php:408
noprivwp_ajax_ecartpay_get_installmentsecartpay.php:409

REST API Routes 1

GET/wp-json/ecartpay/api/orders/(?P<id>\d+)src\routes\router.php:8
WordPress Hooks 14
actioninitecartpay.php:18
filterwoocommerce_payment_gatewaysecartpay.php:46
actionplugins_loadedecartpay.php:56
actionwoocommerce_blocks_loadedecartpay.php:57
actionwoocommerce_api_ecartpayecartpay.php:95
actionwp_enqueue_scriptsecartpay.php:96
actionwoocommerce_payment_gatewaysecartpay.php:97
actionwoocommerce_blocks_enqueue_checkout_block_scripts_beforeecartpay.php:99
actionwoocommerce_before_checkout_formecartpay.php:101
actionwoocommerce_blocks_payment_method_type_registrationecartpay.php:383
actionwoocommerce_thankyouecartpay.php:399
actionwoocommerce_update_options_checkoutsrc\admin\settings.php:106
actionwoocommerce_admin_order_data_after_billing_addresssrc\admin\settings.php:112
actionrest_api_initsrc\routes\router.php:6
Maintenance & Trust

Ecart Pay Maintenance & Trust

Maintenance Signals

WordPress version tested6.6.5
Last updatedFeb 17, 2026
PHP min version7.2
Downloads2K

Community Trust

Rating0/100
Number of ratings0
Active installs80
Alternatives

Ecart Pay Alternatives

SumUp Payment Gateway For WooCommerce

SumUp Payment Gateway For WooCommerce

sumup-payment-gateway-for-woocommerce

A
99

The SumUp plugin for WooCommerce allows businesses to securely process payments online. Accept payments from customers using a range of payment method &hellip;

10K 1 CVE
MONEI Payments for WooCommerce

MONEI Payments for WooCommerce

monei

A
100

Accept Card, Apple Pay, Google Pay, Bizum, PayPal and many more payment methods in your WooCommerce store using MONEI payment gateway.

400 No CVEs
Paystation Payment Gateway for woocommerce

Paystation Payment Gateway for woocommerce

paystation-woocommerce-payment-gateway

A
100

Take credit card payments on your store via Paystation.

100 No CVEs
kevin. Payment Gateway for WooCommerce

kevin. Payment Gateway for WooCommerce

e-commerce-payment-gateway-kevin

A
100

kevin. Payment Gateway plugin for WooCommerce. Let your customers make fast, simple and secure payments directly from their bank accounts across Europ &hellip;

30 No CVEs
Nimbbl

Nimbbl

nimbbl-for-woocommerce

A
100

Welcome to the official Nimbbl WooCommerce plugin, support auto-fill address. Get higher conversions with multiple payment gateways, COD, UPI, BNPL an &hellip;

20 No CVEs
Developer Profile

Ecart Pay Developer Profile

ecartpay

1 plugin · 80 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Ecart Pay

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/ecart-pay/assets/img/card_logs.png/wp-content/plugins/ecart-pay/assets/img/institutions//wp-content/plugins/ecart-pay/assets/js/ecartpay-checkout.js/wp-content/plugins/ecart-pay/assets/js/ecartpay-payjs.js
Script Paths
/wp-content/plugins/ecart-pay/assets/js/ecartpay-checkout.js/wp-content/plugins/ecart-pay/assets/js/ecartpay-payjs.js
Version Parameters
ecartpay/assets/js/ecartpay-checkout.js?ver=ecartpay/assets/js/ecartpay-payjs.js?ver=

HTML / DOM Fingerprints

CSS Classes
ecartpay-fieldsecartpay-card-numberinput-with-iconscard-iconscard-iconvisamastercardamex+9 more
HTML Comments
<!-- Ecart Pay Gateway Fields --><!-- Security code --><!-- Installments --><!-- Ecart Pay Gateway Direct Fields -->+3 more
Data Attributes
data-ecartpay-formdata-ecartpay-checkout-urldata-ecartpay-ajax-urldata-ecartpay-token-urldata-ecartpay-card-numberdata-ecartpay-card-expiry+4 more
JS Globals
ecartpay_vars
REST Endpoints
/wp-json/ecartpay/v1/process/wp-json/ecartpay/v1/token
FAQ

Frequently Asked Questions about Ecart Pay