Fawaterk For WooCommerce Security & Risk Analysis

wordpress.org/plugins/fawaterk-for-woocommerce

Accept secure card payments through fawaterk for your WooCommerce store.

70 active installs v4.2.4 PHP 7.4+ WP 5.8+ Updated Mar 28, 2026
checkoutcredit-cardecommercefawaterkpayments
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Fawaterk For WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Fawaterk For WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The fawaterk-for-woocommerce plugin v4.2.3 exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates excellent practices by utilizing prepared statements for all SQL queries and having near-perfect output escaping, significantly mitigating common injection vulnerabilities. The absence of dangerous functions, critical or high severity taint flows, and known vulnerabilities further contributes to its good security standing. The plugin also implements a reasonable number of nonce and capability checks relative to its entry points.

Key Concerns

  • REST API route without permission callback
  • AJAX handler without auth check
  • External HTTP requests present
  • File operations present
Vulnerabilities
None known

Fawaterk For WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

Fawaterk For WooCommerce Release Timeline

v4.2.4Current
v4.2.3
Code Analysis
Analyzed Mar 16, 2026

Fawaterk For WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
83 escaped
Nonce Checks
5
Capability Checks
1
File Operations
2
External Requests
2
Bundled Libraries
0

Output Escaping

99% escaped84 total outputs
Data Flows · Security
All sanitized

Data Flow Analysis

2 flows
reload_settings_action_callback (classes\fawaterak.class.php:107)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

Fawaterk For WooCommerce Attack Surface

Entry Points3
Unprotected1

AJAX Handlers 2

authwp_ajax_fawaterak_check_order_payment_statushelpers\check_if_paid.helper.php:60
noprivwp_ajax_fawaterak_check_order_payment_statushelpers\check_if_paid.helper.php:61

REST API Routes 1

POST/wp-json/custom/v1/check-orderfawaterk-for-woocommerce.php:220
WordPress Hooks 21
actionadmin_enqueue_scriptsclasses\fawaterak.class.php:45
actionwoocommerce_api_fawaterak_webhook_jsonclasses\fawaterak.class.php:47
actionwoocommerce_api_fawaterak_reload_methodsclasses\fawaterak.class.php:49
actioninitclasses\fawaterak_endpoints.php:14
filterquery_varsclasses\fawaterak_endpoints.php:15
actionwp_enqueue_scriptsclasses\fawaterak_endpoints.php:16
actiontemplate_redirectclasses\fawaterak_endpoints.php:17
filterwoocommerce_is_checkoutclasses\fawaterak_endpoints.php:44
actionadmin_noticesfawaterk-for-woocommerce.php:29
actionplugins_loadedfawaterk-for-woocommerce.php:42
filterwoocommerce_payment_gatewaysfawaterk-for-woocommerce.php:52
filterwoocommerce_available_payment_gatewaysfawaterk-for-woocommerce.php:64
actionwp_enqueue_scriptsfawaterk-for-woocommerce.php:68
actionwoocommerce_blocks_loadedfawaterk-for-woocommerce.php:98
actionwoocommerce_blocks_payment_method_type_registrationfawaterk-for-woocommerce.php:146
actionwp_enqueue_scriptsfawaterk-for-woocommerce.php:216
actionrest_api_initfawaterk-for-woocommerce.php:219
filtercron_scheduleshelpers\check_if_paid.helper.php:11
actionwphelpers\check_if_paid.helper.php:21
actionwoocommerce_thankyouhelpers\check_if_paid.helper.php:64
actionwp_enqueue_scriptshelpers\fawaterk_display_fields_helpers.php:35

Scheduled Events 1

fawaterak_check_order_payment_status
Maintenance & Trust

Fawaterk For WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 28, 2026
PHP min version7.4
Downloads405

Community Trust

Rating0/100
Number of ratings0
Active installs70
Developer Profile

Fawaterk For WooCommerce Developer Profile

fawaterak

1 plugin · 70 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Fawaterk For WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/fawaterk-for-woocommerce/js/style.js/wp-content/plugins/fawaterk-for-woocommerce/js/qrcode.min.js/wp-content/plugins/fawaterk-for-woocommerce/js/mobileWalletHandler.js
Script Paths
/wp-content/plugins/fawaterk-for-woocommerce/js/style.js/wp-content/plugins/fawaterk-for-woocommerce/js/qrcode.min.js/wp-content/plugins/fawaterk-for-woocommerce/js/mobileWalletHandler.js

HTML / DOM Fingerprints

CSS Classes
fawaterk-method-blocks-gatewayfawaterk-blocks-gatewayfawaterk-wallet-blocks-gatewayfawaterk-instapay-blocks-gateway
Data Attributes
data-fawaterk-gateway
JS Globals
fawaterk_order_data
FAQ

Frequently Asked Questions about Fawaterk For WooCommerce