FunnelKit Payment Gateway for Square WooCommerce Security & Risk Analysis

wordpress.org/plugins/funnelkit-payment-gateway-square-for-woocommerce

FunnelKit Payment Gateway for Square WooCommerce is a powerful and reliable payment solution that enables you to accept payments both online and in pe …

30 active installs v1.2.0 PHP 7.4+ WP 5.0+ Updated Feb 7, 2026
funnelkitpaymentsquaresyncwoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is FunnelKit Payment Gateway for Square WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

FunnelKit Payment Gateway for Square WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 3mo ago
Risk Assessment

The "funnelkit-payment-gateway-square-for-woocommerce" plugin version 1.2.0 exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates good practices by implementing robust authentication and authorization checks across its entry points, with all 7 AJAX handlers and 0 REST API routes secured. The absence of dangerous functions and a low percentage of SQL queries not using prepared statements are positive indicators. The plugin also utilizes nonces and capability checks extensively, further bolstering its security. The vulnerability history is clean, with no recorded CVEs, which suggests a consistent focus on security by the developers.

Key Concerns

  • Flows with unsanitized paths
  • SQL queries not using prepared statements (40% missing)
  • File operations without further context
  • External HTTP requests without further context
Vulnerabilities
None known

FunnelKit Payment Gateway for Square WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

FunnelKit Payment Gateway for Square WooCommerce Release Timeline

v1.2.0Current
v1.1.0
v1.0.0
Code Analysis
Analyzed Mar 16, 2026

FunnelKit Payment Gateway for Square WooCommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
3 prepared
Unescaped Output
21
260 escaped
Nonce Checks
20
Capability Checks
19
File Operations
7
External Requests
3
Bundled Libraries
0

SQL Query Safety

60% prepared5 total queries

Output Escaping

93% escaped281 total outputs
Data Flows · Security
3 unsanitized

Data Flow Analysis

7 flows3 with unsanitized paths
check_apple_pay_verification_file (includes\modules\payment\gateways\apple-pay.php:322)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

FunnelKit Payment Gateway for Square WooCommerce Attack Surface

Entry Points7
Unprotected0

AJAX Handlers 7

authwp_ajax_fkwcsq_square_admin_get_blank_payment_tokenincludes\admin\payment-token-editor.php:55
authwp_ajax_fkwcsq_square_admin_remove_payment_tokenincludes\admin\payment-token-editor.php:56
authwp_ajax_fkwcsq_square_admin_refresh_payment_tokensincludes\admin\payment-token-editor.php:57
authwp_ajax_fkwcsq_square_admin_save_payment_tokensincludes\admin\payment-token-editor.php:58
authwp_ajax_fkwcsq_capture_paymentincludes\integrations\woocommerce.php:31
authwp_ajax_fkwcsq_reverify_apple_pay_domainincludes\modules\payment\gateways\apple-pay.php:160
authwp_ajax_fkwcsq_simulate_webhookincludes\webhooks\simple-webhook-simulator.php:27
WordPress Hooks 82
actioninitadmin\onboard.php:28
actionadmin_noticesadmin\onboard.php:35
actionadmin_initadmin\onboard.php:36
actionbefore_woocommerce_initfunnelkit-square.php:105
actioninitfunnelkit-square.php:211
filterwoocommerce_get_settings_pagesfunnelkit-square.php:223
actionplugins_loadedfunnelkit-square.php:239
actionadmin_enqueue_scriptsincludes\admin\payment-token-editor.php:49
actionfkwcsq_square_token_editor_tokensincludes\admin\payment-token-editor.php:52
actionwoocommerce_loadedincludes\admin\user-handler.php:53
actioninitincludes\admin\user-handler.php:56
actionshow_user_profileincludes\admin\user-handler.php:71
actionedit_user_profileincludes\admin\user-handler.php:72
actionpersonal_options_updateincludes\admin\user-handler.php:75
actionedit_user_profile_updateincludes\admin\user-handler.php:76
actionadmin_initincludes\admin\user-handler.php:79
actionfkwcsq_square_user_profileincludes\admin\user-handler.php:82
actionfkwcsq_square_user_profileincludes\admin\user-handler.php:85
filterwoocommerce_order_get_payment_methodincludes\conversions\controller.php:34
filterwoocommerce_subscription_get_payment_methodincludes\conversions\controller.php:35
actionfkwcsq_refresh_square_tokenincludes\cron.php:55
actionfkwcsq_settings_savedincludes\cron.php:69
filterwfacp_smart_buttonsincludes\funnelkit\checkout.php:31
actionwfacp_smart_button_container_fkwcsq_square_gpayincludes\funnelkit\checkout.php:32
actionwfacp_smart_button_container_fkwcsq_apple_payincludes\funnelkit\checkout.php:33
filterwfacp_template_localize_dataincludes\funnelkit\checkout.php:34
actionplugins_loadedincludes\install.php:35
actionwoocommerce_product_options_general_product_dataincludes\integrations\product-meta-box.php:23
actionwoocommerce_process_product_metaincludes\integrations\product-meta-box.php:24
actionwoocommerce_product_quick_edit_endincludes\integrations\product-meta-box.php:25
actionwoocommerce_product_quick_edit_saveincludes\integrations\product-meta-box.php:26
actionwoocommerce_product_bulk_edit_endincludes\integrations\product-meta-box.php:27
actionwoocommerce_product_bulk_edit_saveincludes\integrations\product-meta-box.php:28
filterwoocommerce_payment_gatewaysincludes\integrations\woocommerce.php:28
actionwoocommerce_order_item_add_action_buttonsincludes\integrations\woocommerce.php:30
actionadmin_enqueue_scriptsincludes\integrations\woocommerce.php:32
actionwc_ajax_wfocu_front_handle_fkwcsq_square_paymentsincludes\integrations\woocommerce.php:115
filterwfocu_subscriptions_get_supported_gatewaysincludes\integrations\woocommerce.php:117
filterwfocu_wc_get_supported_gatewaysincludes\integrations\woocommerce.php:118
actionadmin_noticesincludes\modules\payment\gateways\apple-pay.php:153
filterwoocommerce_order_button_htmlincludes\modules\payment\gateways\apple-pay.php:156
filterwoocommerce_pay_order_button_htmlincludes\modules\payment\gateways\apple-pay.php:157
filterfkwcsq_smart_button_localize_dataincludes\modules\payment\gateways\apple-pay.php:158
actionwp_footerincludes\modules\payment\gateways\apple-pay.php:159
actionfkwcsq_smart_button_cart_wrapperincludes\modules\payment\gateways\apple-pay.php:586
actionwp_enqueue_scriptsincludes\modules\payment\gateways\card.php:141
actionwoocommerce_get_customer_payment_tokensincludes\modules\payment\gateways\card.php:147
actionwoocommerce_payment_token_deletedincludes\modules\payment\gateways\card.php:150
actionwoocommerce_payment_token_deletedincludes\modules\payment\gateways\card.php:1788
actionwoocommerce_get_customer_payment_tokensincludes\modules\payment\gateways\card.php:1790
actionwoocommerce_payment_token_deletedincludes\modules\payment\gateways\card.php:1795
actionwoocommerce_get_customer_payment_tokensincludes\modules\payment\gateways\card.php:1796
filterwoocommerce_order_button_htmlincludes\modules\payment\gateways\google-pay.php:351
filterwoocommerce_pay_order_button_htmlincludes\modules\payment\gateways\google-pay.php:352
filterfkwcsq_smart_button_localize_dataincludes\modules\payment\gateways\google-pay.php:353
actionfkwcsq_smart_button_cart_wrapperincludes\modules\payment\gateways\google-pay.php:367
actionwfocu_footer_before_print_scriptsincludes\modules\payment\upsell\apple-pay.php:80
filterwfocu_allow_ajax_actions_for_charge_setupincludes\modules\payment\upsell\apple-pay.php:81
actionwfocu_footer_before_print_scriptsincludes\modules\payment\upsell\card.php:80
filterwfocu_allow_ajax_actions_for_charge_setupincludes\modules\payment\upsell\card.php:81
actionwfocu_footer_before_print_scriptsincludes\modules\payment\upsell\google-pay.php:80
filterwfocu_allow_ajax_actions_for_charge_setupincludes\modules\payment\upsell\google-pay.php:81
filterwoocommerce_update_order_review_fragmentsincludes\smartbuttons.php:79
actionwc_ajax_fkwcsq_get_request_dataincludes\smartbuttons.php:80
actionwc_ajax_fkwcsq_fetch_cart_detailsincludes\smartbuttons.php:81
actionwc_ajax_fkwcsq_add_to_cartincludes\smartbuttons.php:82
actionwc_ajax_fkwcsq_process_smart_button_paymentincludes\smartbuttons.php:83
actionwpincludes\smartbuttons.php:84
actionwp_enqueue_scriptsincludes\smartbuttons.php:85
actionwoocommerce_proceed_to_checkoutincludes\smartbuttons.php:86
actionwoocommerce_before_checkout_formincludes\smartbuttons.php:87
filterwoocommerce_cart_needs_paymentincludes\smartbuttons.php:252
filterwoocommerce_checkout_fieldsincludes\smartbuttons.php:253
actionwoocommerce_before_checkout_processincludes\smartbuttons.php:255
actionwoocommerce_reduce_order_item_stockincludes\sync\order.php:53
actionwoocommerce_reduce_order_stockincludes\sync\order.php:54
actionwoocommerce_order_status_cancelledincludes\sync\order.php:57
actionwoocommerce_order_status_refundedincludes\sync\order.php:58
actionwoocommerce_order_status_failedincludes\sync\order.php:59
actionfkwcsq_auto_sync_product_to_squareincludes\sync\product.php:54
filterwoocommerce_my_subscriptions_payment_methodincludes\traits\subscription.php:77
filterfkwcsq_square_display_save_payment_method_checkboxincludes\traits\subscription.php:78

Scheduled Events 1

fkwcsq_refresh_square_token
Maintenance & Trust

FunnelKit Payment Gateway for Square WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 7, 2026
PHP min version7.4
Downloads2K

Community Trust

Rating100/100
Number of ratings2
Active installs30
Developer Profile

FunnelKit Payment Gateway for Square WooCommerce Developer Profile

Aman

9 plugins · 117K total installs

90
trust score
Avg Security Score
94/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect FunnelKit Payment Gateway for Square WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/css/common.css/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/css/admin.css/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/common.js/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/admin.js/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/checkout.js
Script Paths
/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/common.js/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/admin.js/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/checkout.js
Version Parameters
/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/css/common.css?ver=/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/css/admin.css?ver=/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/common.js?ver=/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/admin.js?ver=/wp-content/plugins/funnelkit-payment-gateway-square-for-woocommerce/assets/js/checkout.js?ver=

HTML / DOM Fingerprints

CSS Classes
fkf-payment-gateway-square
JS Globals
fkWCSQFKWCSQ_DATA
REST Endpoints
/wp-json/fkwcsq/v1
FAQ

Frequently Asked Questions about FunnelKit Payment Gateway for Square WooCommerce