[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fyTdGEk0W6TIEmrqJybw22iFgNy9lZuhhPMyDBJtObVA":3,"$fmNs0IEM_kIEYkFOSN8afY7cDQx_ZiIbqVB57Imt-hz0":340,"$fuH43Y4Rncyjz73zXjxtG91qyhIf8Xcx-K0Aen29QpSI":345},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":27,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30,"discovery_status":31,"vulnerabilities":32,"developer":33,"crawl_stats":29,"alternatives":40,"analysis":125,"fingerprints":321},"gravity-forms-paystation-3-party-hosted","Paystation (3 Party Hosted) for Gravity forms","1.5.6","paystationNZ","https:\u002F\u002Fprofiles.wordpress.org\u002Fpaystationnz\u002F","\u003Cp>Gravity Forms Paystation (3 party hosted) adds a 3 party hosted credit card payment gateway for \u003Ca href=\"https:\u002F\u002Fwww2.paystation.co.nz\" rel=\"nofollow ugc\">Paystation\u003C\u002Fa> to the \u003Ca href=\"http:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> plugin.\u003C\u002Fp>\n\u003Cp>With this plugin you can use Gravity Forms to create various types of payment forms…\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Product forms\u003C\u002Fli>\n\u003Cli>Online Booking forms\u003C\u002Fli>\n\u003Cli>Donation forms\u003C\u002Fli>\n\u003Cli>Service payment forms\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>NOTE: this plugin requires \u003Ca href=\"http:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa>; so you need to have installed and activated Gravity Forms.\u003C\u002Fp>\n\u003Ch4>Requirements:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>The \u003Ca href=\"http:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> plugin, any licence (Personal, Business, Developer).\u003C\u002Fli>\n\u003Cli>An account with \u003Ca href=\"https:\u002F\u002Fwww2.paystation.co.nz\u002F\" rel=\"nofollow ugc\">Paystation\u003C\u002Fa>.\u003C\u002Fli>\n\u003C\u002Ful>\n","Integrates Gravity Forms with the Paystation 3 party hosted payment gateway allowing end-users to purchase goods and services via Gravity Forms.",30,6497,100,3,"2024-07-17T22:01:00.000Z","6.4.8","3.3","6.4.5",[20,21,22,23,24],"credit-card-payments","ecommerce","gravity-forms","online-payments","payment-gateway","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgravity-forms-paystation-3-party-hosted\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.7.zip",92,0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":34,"display_name":7,"profile_url":8,"plugin_count":35,"total_installs":36,"avg_security_score":37,"avg_patch_time_days":11,"trust_score":38,"computed_at":39},"paystationnz",2,130,96,91,"2026-05-19T21:20:07.321Z",[41,58,77,92,109],{"slug":42,"name":43,"version":44,"author":45,"author_profile":46,"description":47,"short_description":48,"active_installs":11,"downloaded":49,"rating":28,"num_ratings":28,"last_updated":50,"tested_up_to":51,"requires_at_least":52,"requires_php":53,"tags":54,"homepage":56,"download_link":57,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"gravity-forms-click-pledge","Click & Pledge for Gravity Forms","26.02000000-WP6.9.1-GF2.9.27","ClickandPledge","https:\u002F\u002Fprofiles.wordpress.org\u002Fclickandpledge\u002F","\u003Cp>Click & Pledge adds a credit card payment gateway to the \u003Ca href=\"http:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> plugin so you can:\u003Cbr \u002F>\n* build online donation & Payment forms\u003Cbr \u002F>\n* build online booking forms\u003Cbr \u002F>\n* build simple Buy Now forms\u003Cbr \u002F>\n* accept recurring payment\u003C\u002Fp>\n\u003Cblockquote>\n\u003Cp>NB: this plugin extends \u003Ca href=\"http:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> functionalities; you still need to install and activate Gravity Forms!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Ch4>Requirements:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Click & Pledge account\u003C\u002Fli>\n\u003Cli>\u003Ca href=\"http:\u002F\u002Fwww.gravityforms.com\u002F\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003Cli>SSL certificate for your hosting account\u003C\u002Fli>\n\u003Cli>Addition of re-CAPTCHA\u003C\u002Fli>\n\u003C\u002Ful>\n","Add a credit card payment gateway for Click & Pledge to the Gravity Forms plugin",11076,"2026-02-18T12:05:00.000Z","6.9.4","","5.6",[55,21,22,23,24],"click-and-pledge","http:\u002F\u002Fclickandpledge.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-click-pledge.26.02000000-WP6.9.1-GF2.9.27.zip",{"slug":59,"name":60,"version":61,"author":62,"author_profile":63,"description":64,"short_description":65,"active_installs":66,"downloaded":67,"rating":37,"num_ratings":68,"last_updated":69,"tested_up_to":51,"requires_at_least":70,"requires_php":71,"tags":72,"homepage":75,"download_link":76,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"gravityforms-eway","Gravity Forms Eway","2.6.1","webaware","https:\u002F\u002Fprofiles.wordpress.org\u002Fwebaware\u002F","\u003Cp>Gravity Forms Eway integrates the \u003Ca href=\"https:\u002F\u002Feway.io\u002F\" rel=\"nofollow ugc\">Eway credit card payment gateway\u003C\u002Fa> with \u003Ca href=\"https:\u002F\u002Fwebaware.com.au\u002Fget-gravity-forms\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> advanced form builder, using Eway’s \u003Ca href=\"https:\u002F\u002Feway.io\u002Ffeatures\u002Fapi-rapid-api\" rel=\"nofollow ugc\">Rapid API Direct Payments\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fwww.eway.com.au\u002Ffeatures\u002Fpayments-recurring-payments\" rel=\"nofollow ugc\">Recurring Payments XML API\u003C\u002Fa>.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>build online donation forms\u003C\u002Fli>\n\u003Cli>build online booking forms\u003C\u002Fli>\n\u003Cli>build simple Buy Now forms\u003C\u002Fli>\n\u003Cli>accept recurring payments (Australian merchants only; see \u003Ca href=\"https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgravityforms-eway\u002Ffaq\u002F\" rel=\"ugc\">FAQ\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cblockquote>\n\u003Cp>NB: this plugin extends \u003Ca href=\"https:\u002F\u002Fwebaware.com.au\u002Fget-gravity-forms\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa>; you still need to install and activate Gravity Forms!\u003C\u002Fp>\n\u003C\u002Fblockquote>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fgfeway.webaware.net.au\u002F\" rel=\"nofollow ugc\">Go Pro\u003C\u002Fa> and access these additional features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>record entry even when transaction fails\u003C\u002Fli>\n\u003Cli>use Responsive Shared Page, no need for SSL certificate on standard payments\u003C\u002Fli>\n\u003Cli>create complex forms with feeds mapping fields to Eway\u003C\u002Fli>\n\u003Cli>create token payment customers\u003C\u002Fli>\n\u003Cli>remember customer cards using tokens\u003C\u002Fli>\n\u003Cli>send shipping addresses to Eway\u003C\u002Fli>\n\u003Cli>use sophisticated conditional logic\u003C\u002Fli>\n\u003Cli>mix multiple currencies on one website\u003C\u002Fli>\n\u003Cli>mix multiple Eway accounts on one website\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Sponsorships\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>recurring payments generously sponsored by \u003Ca href=\"https:\u002F\u002Fwww.castledesign.com.au\u002F\" rel=\"nofollow ugc\">Castle Design\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Thanks for sponsoring new features on Gravity Forms Eway!\u003C\u002Fp>\n\u003Ch3>Translations\u003C\u002Fh3>\n\u003Cp>If you’d like to help out by translating this plugin, please \u003Ca href=\"https:\u002F\u002Ftranslate.wordpress.org\u002Fprojects\u002Fwp-plugins\u002Fgravityforms-eway\" rel=\"nofollow ugc\">sign up for an account and dig in\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch3>Requirements\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>you need to install the \u003Ca href=\"https:\u002F\u002Fwebaware.com.au\u002Fget-gravity-forms\" rel=\"nofollow ugc\">Gravity Forms\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003Cli>you need an SSL\u002FTLS certificate for your hosting account\u003C\u002Fli>\n\u003Cli>you need an account with Eway\u003C\u002Fli>\n\u003Cli>this plugin uses Eway’s \u003Ca href=\"https:\u002F\u002Fgo.eway.io\u002Fs\u002Farticle\u002FDirect-Payments-API-Snippets\" rel=\"nofollow ugc\">Rapid API Direct Payments\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fgo.eway.io\u002Fs\u002Farticle\u002FHow-do-I-setup-a-Recurring-Payment\" rel=\"nofollow ugc\">Recurring Payments XML API\u003C\u002Fa>, and does not support Eway’s Responsive Shared Page (available with \u003Ca href=\"https:\u002F\u002Fgfeway.webaware.net.au\u002F\" rel=\"nofollow ugc\">Pro\u003C\u002Fa>)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy\u003C\u002Fh3>\n\u003Cp>Information gathered for processing a credit card transaction is transmitted to Eway for processing, and in turn, Eway passes that information on to your bank. Please review \u003Ca href=\"https:\u002F\u002Fwww.eway.com.au\u002Fprivacy-policy\u002F\" rel=\"nofollow ugc\">Eway’s Privacy Policy\u003C\u002Fa> for information about how that affects your website’s privacy policy. By using this plugin, you are agreeing to the terms of use for Eway.\u003C\u002Fp>\n","Easily create online payment forms with Gravity Forms and Eway.",500,31379,10,"2025-12-14T04:07:00.000Z","4.2","7.4",[73,21,74,22,24],"donations","eway","https:\u002F\u002Fshop.webaware.com.au\u002Fdownloads\u002Fgravity-forms-eway\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravityforms-eway.2.6.1.zip",{"slug":78,"name":79,"version":80,"author":7,"author_profile":8,"description":81,"short_description":82,"active_installs":13,"downloaded":83,"rating":28,"num_ratings":28,"last_updated":84,"tested_up_to":85,"requires_at_least":86,"requires_php":87,"tags":88,"homepage":52,"download_link":91,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"paystation-woocommerce-payment-gateway","Paystation Payment Gateway for woocommerce","1.3.1","\u003Cp>Accept credit card payments with \u003Ca href=\"http:\u002F\u002Fwww.paystation.co.nz\" rel=\"nofollow ugc\">Paystation\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>With our secure hosted payment pages you can take payments via multiple card types\u003C\u002Fp>\n\u003Cul>\n\u003Cli>VISA\u003C\u002Fli>\n\u003Cli>Mastercard\u003C\u002Fli>\n\u003Cli>American Express\u003C\u002Fli>\n\u003Cli>Diners Club\u003C\u002Fli>\n\u003Cli>Q Card\u003C\u002Fli>\n\u003Cli>POLi\u003C\u002Fli>\n\u003Cli>MasterPass\u003C\u002Fli>\n\u003Cli>UnionPay\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Requirements:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>An account with \u003Ca href=\"https:\u002F\u002Fpaystation.co.nz\u002Fpricing\u002F\" rel=\"nofollow ugc\">Paystation\u003C\u002Fa>.\u003C\u002Fli>\n\u003Cli>An HMAC key for your Paystation account, contact our support team \u003Ca href=\"mailto:support@paystation.co.nz\" rel=\"nofollow ugc\">via email\u003C\u002Fa> if you do not already have this.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Installation\u003C\u002Fh4>\n\u003Col>\n\u003Cli>From the WooCommerce menu on the admin menu, select the ‘Settings’ link.\u003C\u002Fli>\n\u003Cli>Select ‘Payments’ tab from the top menu bar.\u003C\u002Fli>\n\u003Cli>Scroll down to the Paystation payment method and click ‘Manage’ for using Paystation Payment Gateway’.\u003C\u002Fli>\n\u003Cli>Click ‘Enable Paystation Payment Module’ checkbox to turn on plugin.\u003C\u002Fli>\n\u003Cli>Enter Paystation Id as provided by Paystation.\u003C\u002Fli>\n\u003Cli>Enter Gateway Id as provided by Paystation.\u003C\u002Fli>\n\u003Cli>Enter HMAC key as provided by Paystation.\u003C\u002Fli>\n\u003Cli>Select the ‘Enable test mode’ box if required.\u003C\u002Fli>\n\u003Cli>Click ‘Save changes’ button.\u003C\u002Fli>\n\u003Cli>Email our support team \u003Ca href=\"mailto:support@paystation.co.nz\" rel=\"nofollow ugc\">via email\u003C\u002Fa> if you have any issues with the details: Your Paystation ID, Gateway ID, confirming that you are using the Paystation WooCommerce plugin, the website link.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Testing Payments\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Ensure your Paystation settings have ‘Enable test mode’ selected.\u003C\u002Fli>\n\u003Cli>Make sure that you have at least one product added to your store.\u003C\u002Fli>\n\u003Cli>Set up a product with any amount to check successful or unsuccessful transaction testing respectively.\u003C\u002Fli>\n\u003Cli>Add product to cart and proceed to the checkout screen.\u003C\u002Fli>\n\u003Cli>Select Paystation credit card payments as payment method and continue.\u003C\u002Fli>\n\u003Cli>Fill the test card details of hosted payment form with one of our VISA or Mastercard \u003Ca href=\"https:\u002F\u002Fpaystation.co.nz\u002Fdevelopers\u002Ftest-cards\u002F\" rel=\"nofollow ugc\">test cards\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Upon successful transaction orders will be shown at your website backend store.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Taking Live Credit Payments\u003C\u002Fh4>\n\u003Cp>Once the site is working as expected you will need to fill in the \u003Ca href=\"https:\u002F\u002Fpaystation.co.nz\u002Fgolive\" rel=\"nofollow ugc\">Go live\u003C\u002Fa> form so that Paystation can test and set your account into Production Mode.\u003C\u002Fp>\n\u003Cp>Your account will be confirmed by Paystation when it’s live, and after that you need to go back to the Woocommerce checkout settings, and uncheck the ‘Enable test mode’ box in the Paystation method settings.\u003C\u002Fp>\n\u003Cp>Congratulations – you’re now setup to take credit card Payments!\u003C\u002Fp>\n","Take credit card payments on your store via Paystation.",8599,"2026-02-09T02:12:00.000Z","6.9.0","4.1","7.0",[89,21,23,24,90],"credit-card","woocommerce","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpaystation-woocommerce-payment-gateway.1.3.1.zip",{"slug":93,"name":94,"version":95,"author":96,"author_profile":97,"description":98,"short_description":99,"active_installs":100,"downloaded":101,"rating":28,"num_ratings":28,"last_updated":102,"tested_up_to":51,"requires_at_least":103,"requires_php":52,"tags":104,"homepage":107,"download_link":108,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"sagepay-form-payment-gateway-for-gravity-forms","Opayo Form Payment Gateway for Gravity Forms","1.2.2","PatSaTECH","https:\u002F\u002Fprofiles.wordpress.org\u002Fpatsatech\u002F","\u003Cp>This add-on connects \u003Cstrong>Gravity Forms\u003C\u002Fstrong> to \u003Cstrong>Opayo Form\u003C\u002Fstrong> (formerly Sage Pay Form), Elavon’s hosted payment integration. Shoppers are sent to Opayo to enter card details; card data never touches your WordPress site, which keeps your PCI scope lower than with on-page card fields.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>You need\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>WordPress 4.5 or higher and a supported PHP version (7.0+ recommended).\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Gravity Forms\u003C\u002Fstrong> with a license that includes payment add-ons (this plugin extends the Gravity Forms payment framework).\u003C\u002Fli>\n\u003Cli>An \u003Cstrong>Opayo\u003C\u002Fstrong> account with \u003Cstrong>Form\u003C\u002Fstrong> integration enabled, plus your vendor name and Form encryption password from \u003Cstrong>MyOpayo\u003C\u002Fstrong>.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>What it supports\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Product and donation feeds, billing field mapping, and delayed notifications or post creation until payment completes (where you configure it in the feed).\u003C\u002Fli>\n\u003Cli>Opayo \u003Cstrong>VPS Protocol 4.00\u003C\u002Fstrong>, test and live modes, and current Elavon gateway hosts (\u003Ccode>sandbox.opayo.eu.elavon.com\u003C\u002Fcode> \u002F \u003Ccode>live.opayo.eu.elavon.com\u003C\u002Fcode>), with a filter to override URLs if your integration pack specifies different endpoints.\u003C\u002Fli>\n\u003Cli>Reliable handoff to Opayo using a short on-site URL plus a transient (avoids oversized query strings that can cause registration errors).\u003C\u002Fli>\n\u003Cli>After payment, customers can be returned to the form’s page so Gravity Forms can run the normal \u003Cstrong>confirmation\u003C\u002Fstrong> (message or redirect), using the entry’s source URL when available.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Cstrong>Support and feedback\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Questions or ideas: \u003Ca href=\"https:\u002F\u002Fwww.patsatech.com\u002Fcontact-us\" rel=\"nofollow ugc\">contact PatSaTECH\u003C\u002Fa>.\u003C\u002Fp>\n","Accept card payments in Gravity Forms using Opayo Form (hosted checkout by Elavon)—customers pay on Opayo’s pages, not on your server.",80,5995,"2026-04-07T15:04:00.000Z","4.5",[21,22,105,106,24],"opayo-go","opayo-server","http:\u002F\u002Fwww.patsatech.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsagepay-form-payment-gateway-for-gravity-forms.1.2.2.zip",{"slug":110,"name":111,"version":112,"author":110,"author_profile":113,"description":114,"short_description":115,"active_installs":116,"downloaded":117,"rating":28,"num_ratings":28,"last_updated":118,"tested_up_to":119,"requires_at_least":120,"requires_php":71,"tags":121,"homepage":52,"download_link":124,"security_score":13,"vuln_count":28,"unpatched_count":28,"last_vuln_date":29,"fetched_at":30},"zaakpay","ZaakPay","1.0.1","https:\u002F\u002Fprofiles.wordpress.org\u002Fzaakpay\u002F","\u003Cp>Easily integrate Zaakpay, a secure payment gateway, into your WooCommerce store. This plugin allows your customers to pay using credit cards, debit cards, net banking, and other supported methods via Zaakpay’s trusted payment processing system.\u003C\u002Fp>\n\u003Cp>A few notes about the sections above:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Supports major payment methods including credit\u002Fdebit cards, etc.\u003C\u002Fli>\n\u003Cli>Seamless integration with WooCommerce checkout.\u003C\u002Fli>\n\u003Cli>Secure and reliable transaction processing via Zaakpay.\u003C\u002Fli>\n\u003Cli>Real-time payment status updates and error handling.\u003C\u002Fli>\n\u003C\u002Ful>\n","Seamlessly integrate Zaakpay payment gateway with WooCommerce for secure and reliable online payments.",20,310,"2025-12-24T12:25:00.000Z","6.8.5","6.0",[20,23,24,122,123],"payment-processor","secure-payments","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzaakpay.1.0.1.zip",{"attackSurface":126,"codeSignals":236,"taintFlows":282,"riskAssessment":310,"analyzedAt":320},{"hooks":127,"ajaxHandlers":223,"restRoutes":233,"shortcodes":234,"cronEvents":235,"entryPointCount":35,"unprotectedCount":35},[128,134,139,143,147,151,156,160,164,168,171,175,179,183,188,191,194,199,203,207,211,215,219],{"type":129,"name":130,"callback":131,"file":132,"line":133},"action","admin_init","actionAdminInit","class.GFPaystationAdmin.php",26,{"type":135,"name":136,"callback":137,"file":132,"line":138},"filter","gform_addon_navigation","gformAddonNavigation",34,{"type":129,"name":140,"callback":141,"file":132,"line":142},"admin_notices","actionAdminNotices",37,{"type":135,"name":144,"callback":145,"file":132,"line":146},"gform_enable_entry_info_payment_details","__return_false",43,{"type":135,"name":148,"callback":149,"file":132,"line":150},"admin_enqueue_scripts","enqueueScripts",46,{"type":135,"name":152,"callback":153,"file":154,"line":155},"wp_print_scripts","removeScripts","class.GFPaystationFeedAdmin.php",24,{"type":135,"name":157,"callback":158,"file":154,"line":159},"parent_file","filterParentFile",25,{"type":129,"name":161,"callback":162,"priority":68,"file":154,"line":163},"save_post","saveCustomFields",27,{"type":135,"name":165,"callback":166,"file":154,"line":167},"post_row_actions","filterPostRowActions",29,{"type":135,"name":169,"callback":170,"priority":68,"file":154,"line":11},"wp_insert_post_data","filterInsertPostData",{"type":135,"name":172,"callback":173,"file":154,"line":174},"post_updated_messages","filterPostUpdatedMessages",31,{"type":129,"name":176,"callback":176,"file":177,"line":178},"init","class.GFPaystationPlugin.php",56,{"type":129,"name":180,"callback":181,"file":177,"line":182},"parse_request","processPaystationReturn",57,{"type":129,"name":184,"callback":185,"priority":186,"file":177,"line":187},"wp","processFormConfirmation",5,58,{"type":135,"name":189,"callback":190,"file":177,"line":38},"gform_validation","gformValidation",{"type":135,"name":192,"callback":193,"priority":68,"file":177,"line":27},"gform_validation_message","gformValidationMessage",{"type":135,"name":195,"callback":196,"priority":197,"file":177,"line":198},"gform_confirmation","gformConfirmation",1000,93,{"type":135,"name":200,"callback":201,"priority":68,"file":177,"line":202},"gform_disable_post_creation","gformDelayPost",94,{"type":135,"name":204,"callback":205,"priority":68,"file":177,"line":206},"gform_disable_user_notification","gformDelayUserNotification",97,{"type":135,"name":208,"callback":209,"priority":68,"file":177,"line":210},"gform_disable_admin_notification","gformDelayAdminNotification",98,{"type":135,"name":212,"callback":213,"priority":68,"file":177,"line":214},"gform_disable_notification","gformDelayNotification",99,{"type":135,"name":216,"callback":217,"priority":68,"file":177,"line":218},"gform_custom_merge_tags","gformCustomMergeTags",101,{"type":135,"name":220,"callback":221,"priority":68,"file":177,"line":222},"gform_replace_merge_tags","gformReplaceMergeTags",102,[224,229],{"action":225,"nopriv":226,"callback":227,"hasNonce":226,"hasCapCheck":226,"file":132,"line":228},"gfpaystation_form_fields",false,"ajaxGfFormFields",49,{"action":230,"nopriv":226,"callback":231,"hasNonce":226,"hasCapCheck":226,"file":132,"line":232},"gfpaystation_form_has_feed","ajaxGfFormHasFeed",50,[],[],[],{"dangerousFunctions":237,"sqlUsage":238,"outputEscaping":240,"fileOperations":35,"externalRequests":28,"nonceChecks":35,"capabilityChecks":35,"bundledLibraries":281},[],{"prepared":28,"raw":28,"locations":239},[],{"escaped":35,"rawEcho":241,"locations":242},19,[243,246,248,249,251,253,254,256,258,260,262,264,267,269,271,273,275,277,279],{"file":132,"line":244,"context":245},196,"raw output",{"file":154,"line":247,"context":245},129,{"file":154,"line":247,"context":245},{"file":154,"line":250,"context":245},140,{"file":154,"line":252,"context":245},172,{"file":154,"line":252,"context":245},{"file":154,"line":255,"context":245},205,{"file":154,"line":257,"context":245},267,{"file":154,"line":259,"context":245},277,{"file":154,"line":261,"context":245},287,{"file":154,"line":263,"context":245},304,{"file":265,"line":266,"context":245},"class.GFPaystationOptionsAdmin.php",166,{"file":265,"line":268,"context":245},171,{"file":265,"line":270,"context":245},180,{"file":265,"line":272,"context":245},189,{"file":265,"line":274,"context":245},214,{"file":177,"line":276,"context":245},484,{"file":177,"line":278,"context":245},840,{"file":177,"line":280,"context":245},851,[],[283,301],{"entryPoint":284,"graph":285,"unsanitizedCount":299,"severity":300},"ajaxGfFormFields (class.GFPaystationAdmin.php:186)",{"nodes":286,"edges":297},[287,292],{"id":288,"type":289,"label":290,"file":132,"line":291},"n0","source","$_GET",187,{"id":293,"type":294,"label":295,"file":132,"line":244,"wp_function":296},"n1","sink","echo() [XSS]","echo",[298],{"from":288,"to":293,"sanitized":226},1,"medium",{"entryPoint":302,"graph":303,"unsanitizedCount":299,"severity":309},"\u003Cclass.GFPaystationAdmin> (class.GFPaystationAdmin.php:0)",{"nodes":304,"edges":307},[305,306],{"id":288,"type":289,"label":290,"file":132,"line":291},{"id":293,"type":294,"label":295,"file":132,"line":244,"wp_function":296},[308],{"from":288,"to":293,"sanitized":226},"low",{"summary":311,"deductions":312},"The \"gravity-forms-paystation-3-party-hosted\" plugin v1.5.6 presents a mixed security posture. On the positive side, it demonstrates good practices by not using dangerous functions, executing all SQL queries using prepared statements, and implementing nonce and capability checks for its identified entry points. There are no recorded vulnerabilities or CVEs, suggesting a history of relative security.\n\nHowever, significant concerns arise from the static analysis. The plugin exposes two AJAX handlers, both of which lack authentication checks, creating a substantial attack surface for unauthorized actions. While the taint analysis did not identify critical or high severity issues, it did reveal two flows with unsanitized paths, which could potentially be exploited if the AJAX handlers are not properly secured. The low percentage of properly escaped output (10%) is also a concern, indicating a risk of Cross-Site Scripting (XSS) vulnerabilities.\n\nIn conclusion, the plugin has a strong foundation in terms of SQL security and the absence of known vulnerabilities. Nevertheless, the unprotected AJAX endpoints and the prevalence of unescaped output represent notable security weaknesses that could be leveraged by attackers. Addressing these specific issues should be a priority to improve the plugin's overall security.",[313,315,318],{"reason":314,"points":68},"Unprotected AJAX handlers",{"reason":316,"points":317},"Unsanitized paths in taint flows",8,{"reason":319,"points":186},"Low percentage of properly escaped output","2026-04-16T11:23:22.499Z",{"wat":322,"direct":330},{"assetPaths":323,"generatorPatterns":325,"scriptPaths":326,"versionParams":327},[324],"\u002Fwp-content\u002Fplugins\u002Fgravity-forms-paystation-3-party-hosted\u002Fstyle-admin.css",[],[],[328,329],"gravity-forms-paystation-3-party-hosted\u002Fstyle-admin.css?ver=","gravityforms-paystation.php?ver=",{"cssClasses":331,"htmlComments":332,"htmlAttributes":333,"restEndpoints":335,"jsGlobals":337,"shortcodeOutput":339},[],[],[334],"data-gfpaystation-form-id",[336],"\u002Fwp-json\u002Fgfpaystation\u002Fv1\u002Fform\u002F",[338,225],"gfpaystation_form_id",[],{"error":341,"url":342,"statusCode":343,"statusMessage":344,"message":344},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fgravity-forms-paystation-3-party-hosted\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":346,"versions":347},16,[348,354,360,367,374,381,388,395,402,409,416,422,429,436,443,450],{"version":349,"download_url":26,"svn_tag_url":350,"released_at":29,"has_diff":226,"diff_files_changed":351,"diff_lines":29,"trac_diff_url":352,"vulnerabilities":353,"is_current":226},"1.5.7","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.7\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.6&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.7",[],{"version":6,"download_url":355,"svn_tag_url":356,"released_at":29,"has_diff":226,"diff_files_changed":357,"diff_lines":29,"trac_diff_url":358,"vulnerabilities":359,"is_current":341},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.6.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.6\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.5&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.6",[],{"version":361,"download_url":362,"svn_tag_url":363,"released_at":29,"has_diff":226,"diff_files_changed":364,"diff_lines":29,"trac_diff_url":365,"vulnerabilities":366,"is_current":226},"1.5.5","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.5.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.4&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.5",[],{"version":368,"download_url":369,"svn_tag_url":370,"released_at":29,"has_diff":226,"diff_files_changed":371,"diff_lines":29,"trac_diff_url":372,"vulnerabilities":373,"is_current":226},"1.5.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.3&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.4",[],{"version":375,"download_url":376,"svn_tag_url":377,"released_at":29,"has_diff":226,"diff_files_changed":378,"diff_lines":29,"trac_diff_url":379,"vulnerabilities":380,"is_current":226},"1.5.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.2&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.3",[],{"version":382,"download_url":383,"svn_tag_url":384,"released_at":29,"has_diff":226,"diff_files_changed":385,"diff_lines":29,"trac_diff_url":386,"vulnerabilities":387,"is_current":226},"1.5.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.1&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.2",[],{"version":389,"download_url":390,"svn_tag_url":391,"released_at":29,"has_diff":226,"diff_files_changed":392,"diff_lines":29,"trac_diff_url":393,"vulnerabilities":394,"is_current":226},"1.5.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.5.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.5.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.4.3&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.5.1",[],{"version":396,"download_url":397,"svn_tag_url":398,"released_at":29,"has_diff":226,"diff_files_changed":399,"diff_lines":29,"trac_diff_url":400,"vulnerabilities":401,"is_current":226},"1.4.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.4.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.4.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.4.2&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.4.3",[],{"version":403,"download_url":404,"svn_tag_url":405,"released_at":29,"has_diff":226,"diff_files_changed":406,"diff_lines":29,"trac_diff_url":407,"vulnerabilities":408,"is_current":226},"1.4.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.4.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.4.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.4.0&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.4.2",[],{"version":410,"download_url":411,"svn_tag_url":412,"released_at":29,"has_diff":226,"diff_files_changed":413,"diff_lines":29,"trac_diff_url":414,"vulnerabilities":415,"is_current":226},"1.4.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.4.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.4.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.3.1&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.4.0",[],{"version":80,"download_url":417,"svn_tag_url":418,"released_at":29,"has_diff":226,"diff_files_changed":419,"diff_lines":29,"trac_diff_url":420,"vulnerabilities":421,"is_current":226},"https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.3.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.3.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.3.0&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.3.1",[],{"version":423,"download_url":424,"svn_tag_url":425,"released_at":29,"has_diff":226,"diff_files_changed":426,"diff_lines":29,"trac_diff_url":427,"vulnerabilities":428,"is_current":226},"1.3.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.3.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.3.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.2.1&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.3.0",[],{"version":430,"download_url":431,"svn_tag_url":432,"released_at":29,"has_diff":226,"diff_files_changed":433,"diff_lines":29,"trac_diff_url":434,"vulnerabilities":435,"is_current":226},"1.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.2.0&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.2.1",[],{"version":437,"download_url":438,"svn_tag_url":439,"released_at":29,"has_diff":226,"diff_files_changed":440,"diff_lines":29,"trac_diff_url":441,"vulnerabilities":442,"is_current":226},"1.2.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.2.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.2.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.1.0&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.2.0",[],{"version":444,"download_url":445,"svn_tag_url":446,"released_at":29,"has_diff":226,"diff_files_changed":447,"diff_lines":29,"trac_diff_url":448,"vulnerabilities":449,"is_current":226},"1.1.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.1.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.1.0\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.0.0&new_path=%2Fgravity-forms-paystation-3-party-hosted%2Ftags%2F1.1.0",[],{"version":451,"download_url":452,"svn_tag_url":453,"released_at":29,"has_diff":226,"diff_files_changed":454,"diff_lines":29,"trac_diff_url":29,"vulnerabilities":455,"is_current":226},"1.0.0","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgravity-forms-paystation-3-party-hosted.1.0.0.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fgravity-forms-paystation-3-party-hosted\u002Ftags\u002F1.0.0\u002F",[],[]]