[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fLyxLDXerkA3BMYt7fH3IR_k-UAZDIDs_PDfMPn1npSY":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":22,"download_link":23,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":26,"vulnerabilities":27,"developer":28,"crawl_stats":25,"alternatives":36,"analysis":60,"fingerprints":374},"hk-payment-gateway-for-converse","Payment Gateway for Converse Bank","1.1.0","HK Digital Agency LLC","https:\u002F\u002Fprofiles.wordpress.org\u002Fhkdigitalagency\u002F","\u003Cp>\u003Cstrong>Payment Gateway for Converse Bank\u003C\u002Fstrong> seamlessly integrates Converse Bank CJSC’s payment system into your WooCommerce store, enabling secure online payments for Armenian businesses.\u003C\u002Fp>\n\u003Ch4>Key Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Multiple Currencies\u003C\u002Fstrong> – Accept payments in AMD (Armenian Dram), USD, EUR, and RUB\u003C\u002Fli>\n\u003Cli>\u003Cstrong>3DS2 Security\u003C\u002Fstrong> – Enhanced security with 3D Secure 2.0 authentication\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Card Binding\u003C\u002Fstrong> – Save customer cards for faster repeat purchases\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Subscription Support\u003C\u002Fstrong> – Compatible with WooCommerce Subscriptions\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Payment Authorization\u003C\u002Fstrong> – Pre-authorize payments before capturing\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Refund Support\u003C\u002Fstrong> – Process full and partial refunds directly from WordPress admin\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multilingual\u003C\u002Fstrong> – Payment pages available in Armenian, Russian, and English\u003C\u002Fli>\n\u003Cli>\u003Cstrong>WPML Compatible\u003C\u002Fstrong> – Works seamlessly with multilingual websites\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Test Mode\u003C\u002Fstrong> – Sandbox environment for testing before going live\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Automatic Updates\u003C\u002Fstrong> – Keep the plugin up-to-date automatically\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Who Is This For?\u003C\u002Fh4>\n\u003Cp>This plugin is designed for Armenian businesses who:\u003Cbr \u002F>\n* Use WooCommerce for e-commerce\u003Cbr \u002F>\n* Have a merchant account with Converse Bank\u003Cbr \u002F>\n* Need to accept online card payments\u003Cbr \u002F>\n* Want secure, PCI-compliant payment processing\u003C\u002Fp>\n\u003Ch4>Requirements\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>WordPress 5.0 or higher\u003C\u002Fli>\n\u003Cli>WooCommerce 5.0 or higher\u003C\u002Fli>\n\u003Cli>PHP 7.4 or higher (PHP 8.2+ supported)\u003C\u002Fli>\n\u003Cli>Active merchant account with Converse Bank\u003C\u002Fli>\n\u003Cli>SSL certificate (required for production)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Getting Started\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Step 1: Contact Converse Bank\u003C\u002Fstrong>\u003Cbr \u002F>\n* Phone: \u003Cstrong>055 008-298\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email: \u003Cstrong>onlinepayments@conversebank.am\u003C\u002Fstrong>\u003Cbr \u002F>\n* Request merchant credentials and payment gateway access\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Step 2: Plugin Identification\u003C\u002Fstrong>\u003Cbr \u002F>\nBefore using this plugin, you must complete identification:\u003Cbr \u002F>\n* Visit: \u003Ca href=\"https:\u002F\u002Fhkdigital.am\u002F\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa>\u003Cbr \u002F>\n* Call: \u003Cstrong>033 779-779\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email: \u003Cstrong>support@hkdigital.am\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> Identification service is paid. Contact us for pricing.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Step 3: Configuration\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Install and activate the plugin\u003Cbr \u002F>\n2. Go to WooCommerce \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Settings \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Payments \u003Cspan aria-hidden=\"true\" class=\"wp-exclude-emoji\">→\u003C\u002Fspan> Converse Bank\u003Cbr \u002F>\n3. Enter your merchant credentials from Converse Bank\u003Cbr \u002F>\n4. Configure currency and language settings\u003Cbr \u002F>\n5. Enable test mode for testing\u003Cbr \u002F>\n6. Go live when ready\u003C\u002Fp>\n\u003Ch4>Payment Flow\u003C\u002Fh4>\n\u003Col>\n\u003Cli>Customer selects Converse Bank as payment method at checkout\u003C\u002Fli>\n\u003Cli>Customer is redirected to secure Converse Bank payment page\u003C\u002Fli>\n\u003Cli>Customer enters card details (3DS2 authentication if required)\u003C\u002Fli>\n\u003Cli>Payment is processed\u003C\u002Fli>\n\u003Cli>Customer is redirected back to your store\u003C\u002Fli>\n\u003Cli>Order status is updated automatically\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Documentation & Support\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>HK Digital Agency Support:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email: support@hkdigital.am\u003Cbr \u002F>\n* Phone: 033 779-779\u003Cbr \u002F>\n* Website: \u003Ca href=\"https:\u002F\u002Fhkdigital.am\u002F\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Converse Bank Support:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email: onlinepayments@conversebank.am\u003Cbr \u002F>\n* Phone: 055 008-298\u003C\u002Fp>\n\u003Ch4>Languages\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Armenian (hy) – Native\u003C\u002Fli>\n\u003Cli>English (en)\u003C\u002Fli>\n\u003Cli>Russian (ru)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Privacy Policy\u003C\u002Fh3>\n\u003Cp>This plugin:\u003Cbr \u002F>\n* Does not collect personal data from visitors\u003Cbr \u002F>\n* Processes order and payment data as required for transaction processing\u003Cbr \u002F>\n* Communicates with Converse Bank servers for payment processing\u003Cbr \u002F>\n* Stores merchant credentials locally in WordPress database\u003Cbr \u002F>\n* May store card binding tokens if card binding is enabled\u003Cbr \u002F>\n* Does not share data with third parties except as required for payment processing\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Shared with Converse Bank:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Order amount and currency\u003Cbr \u002F>\n* Customer name and email (as entered at checkout)\u003Cbr \u002F>\n* Order ID and reference\u003Cbr \u002F>\n* Return URLs for payment completion\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Card Data:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Card details are never stored on your WordPress site\u003Cbr \u002F>\n* All card information is entered directly on Converse Bank’s secure payment page\u003Cbr \u002F>\n* PCI DSS compliance is handled by Converse Bank\u003C\u002Fp>\n\u003Ch3>Additional Information\u003C\u002Fh3>\n\u003Ch4>System Requirements\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Minimum:\u003C\u002Fstrong>\u003Cbr \u002F>\n* WordPress 5.0+\u003Cbr \u002F>\n* WooCommerce 5.0+\u003Cbr \u002F>\n* PHP 7.4+\u003Cbr \u002F>\n* MySQL 5.6+ or MariaDB 10.0+\u003Cbr \u002F>\n* SSL Certificate (required for production)\u003Cbr \u002F>\n* cURL PHP extension\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Recommended:\u003C\u002Fstrong>\u003Cbr \u002F>\n* WordPress 6.7+\u003Cbr \u002F>\n* WooCommerce 9.0+\u003Cbr \u002F>\n* PHP 8.1+\u003Cbr \u002F>\n* MySQL 8.0+ or MariaDB 10.6+\u003Cbr \u002F>\n* SSL Certificate (required)\u003C\u002Fp>\n\u003Ch4>Automatic Updates\u003C\u002Fh4>\n\u003Cp>The plugin includes automatic update notifications. Updates are released to:\u003Cbr \u002F>\n* Maintain compatibility with WordPress and WooCommerce\u003Cbr \u002F>\n* Add new features and payment methods\u003Cbr \u002F>\n* Fix bugs and improve performance\u003Cbr \u002F>\n* Ensure PCI compliance and security\u003C\u002Fp>\n\u003Cp>Update service terms available on our website.\u003C\u002Fp>\n\u003Ch4>Supported Payment Cards\u003C\u002Fh4>\n\u003Cp>Through Converse Bank, this plugin supports:\u003Cbr \u002F>\n* Visa\u003Cbr \u002F>\n* Mastercard\u003Cbr \u002F>\n* ArCa (Armenian Card)\u003Cbr \u002F>\n* Other cards accepted by Converse Bank’s payment gateway\u003C\u002Fp>\n\u003Cp>Contact Converse Bank for complete list of supported cards.\u003C\u002Fp>\n\u003Ch4>Merchant Fees\u003C\u002Fh4>\n\u003Cp>Payment processing fees are determined by Converse Bank. Contact them for current rates:\u003Cbr \u002F>\n* Email: onlinepayments@conversebank.am\u003Cbr \u002F>\n* Phone: 055 008-298\u003C\u002Fp>\n\u003Ch4>Copyright & Licensing\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Copyright © 2024 HK Digital Agency LLC (ԷՅՋԿԱ ԴԻՋԻՏԱԼ ԷՋԵՆՍԻ ՍՊԸ)\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>This plugin and its contents are protected by copyright law.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Restrictions:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Distribution, modification, or adaptation without permission is prohibited\u003Cbr \u002F>\n* Use of trademarks and branding materials is restricted\u003Cbr \u002F>\n* Licensed for use, not for resale or redistribution\u003C\u002Fp>\n\u003Cp>\u003Cstrong>License Grant:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Users receive a paid license to use the plugin on their WordPress\u002FWooCommerce site\u003Cbr \u002F>\n* License is non-transferable and site-specific\u003Cbr \u002F>\n* Pricing available at \u003Ca href=\"https:\u002F\u002Fhkdigital.am\u002F\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa> or call 033 779-779\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Data Collection Notice:\u003C\u002Fstrong>\u003Cbr \u002F>\nFor copyright protection purposes, the plugin collects:\u003Cbr \u002F>\n* Domain name\u003Cbr \u002F>\n* Site URL\u003Cbr \u002F>\n* IP address\u003C\u002Fp>\n\u003Cp>This data is transmitted to HK Digital Agency for license verification.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Disclaimer:\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>HK Digital Agency LLC is not responsible for:\u003Cbr \u002F>\n* Services provided by Converse Bank or other third parties\u003Cbr \u002F>\n* Payment processing fees or merchant account issues\u003Cbr \u002F>\n* Technical issues from WordPress, WooCommerce, or other plugin updates\u003Cbr \u002F>\n* Partial or complete plugin malfunction due to third-party updates\u003Cbr \u002F>\n* Website uptime, security, or data integrity\u003Cbr \u002F>\n* PCI compliance (handled by Converse Bank)\u003Cbr \u002F>\n* Chargebacks or disputed transactions\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Support:\u003C\u002Fstrong>\u003Cbr \u002F>\n* Email: support@hkdigital.am\u003Cbr \u002F>\n* Phone: 033 779-779\u003Cbr \u002F>\n* Website: \u003Ca href=\"https:\u002F\u002Fhkdigital.am\u002F\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa>\u003C\u002Fp>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Developed by HK Digital Agency LLC\u003C\u002Fstrong>\u003Cbr \u002F>\n* Website: \u003Ca href=\"https:\u002F\u002Fhkdigital.am\u002F\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa>\u003Cbr \u002F>\n* Email: support@hkdigital.am\u003Cbr \u002F>\n* Phone: 033 779-779\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Payment Processing by Converse Bank CJSC\u003C\u002Fstrong>\u003Cbr \u002F>\n* Website: \u003Ca href=\"https:\u002F\u002Fwww.conversebank.am\u002F\" rel=\"nofollow ugc\">conversebank.am\u003C\u002Fa>\u003Cbr \u002F>\n* Email: onlinepayments@conversebank.am\u003Cbr \u002F>\n* Phone: 055 008-298\u003C\u002Fp>\n\u003Cp>Special thanks to all merchants using our plugin and providing valuable feedback.\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin communicates with the following external services:\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Converse Bank Payment Gateway\u003C\u002Fstrong>\u003Cbr \u002F>\n* Purpose: Process credit\u002Fdebit card payments\u003Cbr \u002F>\n* Data Sent: Order amount, currency, customer details, order reference\u003Cbr \u002F>\n* Data Received: Payment status, transaction ID, authorization codes\u003Cbr \u002F>\n* Privacy Policy: Contact Converse Bank\u003Cbr \u002F>\n* Terms of Service: Merchant agreement with Converse Bank\u003Cbr \u002F>\n* Website: \u003Ca href=\"https:\u002F\u002Fwww.conversebank.am\u002F\" rel=\"nofollow ugc\">conversebank.am\u003C\u002Fa>\u003Cbr \u002F>\n* Secure: All communication over HTTPS with SSL encryption\u003C\u002Fp>\n\u003Cp>\u003Cstrong>HK Digital Agency License Server\u003C\u002Fstrong>\u003Cbr \u002F>\n* Purpose: Plugin activation and license verification\u003Cbr \u002F>\n* Data Sent: Domain name, site URL, IP address, plugin version\u003Cbr \u002F>\n* Privacy Policy: \u003Ca href=\"https:\u002F\u002Fplugins.hkdigital.am\u002Fterms.html\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa>\u003Cbr \u002F>\n* Website: \u003Ca href=\"https:\u002F\u002Fhkdigital.am\u002F\" rel=\"nofollow ugc\">hkdigital.am\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Note:\u003C\u002Fstrong> Use of this plugin requires:\u003Cbr \u002F>\n* Active merchant account with Converse Bank\u003Cbr \u002F>\n* Compliance with payment card industry (PCI) standards (handled by Converse Bank)\u003Cbr \u002F>\n* Valid SSL certificate on your website\u003Cbr \u002F>\n* Acceptance of terms of service from both HK Digital Agency and Converse Bank\u003C\u002Fp>\n\u003Ch3>Troubleshooting\u003C\u002Fh3>\n\u003Ch4>Payment redirect not working\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Solution:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Verify SSL certificate is active and valid\u003Cbr \u002F>\n2. Check that return URLs are correctly configured\u003Cbr \u002F>\n3. Ensure no firewall or security plugin is blocking redirects\u003Cbr \u002F>\n4. Enable debug logging and check logs for errors\u003C\u002Fp>\n\u003Ch4>Card binding not available\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Solution:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Verify card binding is enabled in plugin settings\u003Cbr \u002F>\n2. Confirm binding credentials are entered correctly\u003Cbr \u002F>\n3. Contact Converse Bank to ensure binding is enabled on your merchant account\u003C\u002Fp>\n\u003Ch4>Refunds failing\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Solution:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Ensure refund credentials are correct in settings\u003Cbr \u002F>\n2. Verify transaction is eligible for refund (timing, amount)\u003Cbr \u002F>\n3. Check WooCommerce logs for specific error messages\u003Cbr \u002F>\n4. Contact Converse Bank support\u003C\u002Fp>\n\u003Ch4>Test mode not working\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Solution:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Verify test mode is enabled in plugin settings\u003Cbr \u002F>\n2. Ensure you’re using test credentials provided by Converse Bank\u003Cbr \u002F>\n3. Confirm test environment is accessible from your server\u003C\u002Fp>\n\u003Ch4>Translation not loading\u003C\u002Fh4>\n\u003Cp>\u003Cstrong>Solution:\u003C\u002Fstrong>\u003Cbr \u002F>\n1. Verify WPML or Polylang is properly configured\u003Cbr \u002F>\n2. Check that language files exist in \u003Ccode>\u002Flanguages\u002F\u003C\u002Fcode> folder\u003Cbr \u002F>\n3. Clear all caches and refresh\u003Cbr \u002F>\n4. Update to latest plugin version (translation loading improved in 1.1.0)\u003C\u002Fp>\n\u003Cp>For additional support, contact:\u003Cbr \u002F>\n* HK Digital: support@hkdigital.am \u002F 033 779-779\u003Cbr \u002F>\n* Converse Bank: onlinepayments@conversebank.am \u002F 055 008-298\u003C\u002Fp>\n","Converse Bank payment gateway for WooCommerce. Accept payments in AMD, USD, EUR, and RUB with 3DS2 security.",10,1177,100,1,"2025-11-04T15:36:00.000Z","6.7.5","5.0","7.4",[20,21],"converse","converse-bank","#","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fhk-payment-gateway-for-converse.1.1.0.zip",0,null,"2026-03-15T15:16:48.613Z",[],{"slug":29,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":31,"avg_security_score":32,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},"hkdigitalagency",11,660,92,456,73,"2026-04-05T15:02:07.909Z",[37],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":11,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":57,"download_link":58,"security_score":13,"vuln_count":24,"unpatched_count":24,"last_vuln_date":25,"fetched_at":59},"conversejs","ConverseJS","4.2.0","brjhcxnnwqjevwc","https:\u002F\u002Fprofiles.wordpress.org\u002Fbrjhcxnnwqjevwc\u002F","\u003Cp>Converse.js is an open source webchat client, that runs in the browser and can be integrated into any website.\u003C\u002Fp>\n\u003Cp>It’s similar to Facebook chat, but also supports multi-user chatrooms.\u003C\u002Fp>\n\u003Cp>Converse.js can connect to any accessible XMPP\u002FJabber server, either from a public provider such as chatme.im, or to one you have set up yourself.\u003C\u002Fp>\n\u003Cp>For more information, check out \u003Ca href=\"https:\u002F\u002Fconversejs.org\u002F\" rel=\"nofollow ugc\">conversejs\u003C\u002Fa> and \u003Ca href=\"https:\u002F\u002Fmotostorie.blog\u002F\" rel=\"nofollow ugc\">MotoStorie\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Special Thanks\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>To my sister for having tolerated\u003C\u002Fli>\n\u003Cli>My work for the economic support\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Single-user chat\u003C\u002Fli>\n\u003Cli>Multi-user chatrooms \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0045.html\" rel=\"nofollow ugc\">XEP 45\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Direct invitations to chat rooms \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0249.html\" rel=\"nofollow ugc\">XEP 249\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>vCard support \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0054.html\" rel=\"nofollow ugc\">XEP 54\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Service discovery \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0030.html\" rel=\"nofollow ugc\">XEP 30\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>In-band registration \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0077.html\" rel=\"nofollow ugc\">XEP 77\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Contact rosters and groups\u003C\u002Fli>\n\u003Cli>Contact subscriptions\u003C\u002Fli>\n\u003Cli>Roster item exchange \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Ftmp\u002Fxep-0144-1.1.html\" rel=\"nofollow ugc\">XEP 144\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Chat statuses (online, busy, away, offline)\u003C\u002Fli>\n\u003Cli>Custom status messages\u003C\u002Fli>\n\u003Cli>Typing and chat state notifications \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0085.html\" rel=\"nofollow ugc\">XEP 85\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Desktop notification messages\u003C\u002Fli>\n\u003Cli>Messages appear in all connected chat clients \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0280.html\" rel=\"nofollow ugc\">XEP 280\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Third person “\u002Fme” messages \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0245.html\" rel=\"nofollow ugc\">XEP 245\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>XMPP Ping \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0199.html\" rel=\"nofollow ugc\">XEP 199\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Server-side archiving of messages \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0313.html\" rel=\"nofollow ugc\">XEP 313\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Client state indication \u003Ca href=\"http:\u002F\u002Fxmpp.org\u002Fextensions\u002Fxep-0352.html\" rel=\"nofollow ugc\">XEP 352\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Off-the-record encryption\u003C\u002Fli>\n\u003Cli>Translated into 16 languages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Hand-crafted, and made with love, in Padova, Italy.\u003C\u002Fp>\n\u003Cp>Based on \u003Ca href=\"http:\u002F\u002Fconversejs.org\u002F\" rel=\"nofollow ugc\">Converse.js\u003C\u002Fa>.\u003C\u002Fp>\n","Converse.js is an open source webchat client, that runs in the browser and can be integrated into any website.",17379,72,5,"","6.4.8","4.6","7.3",[53,20,54,55,56],"chat","irc","jabber","xmpp","https:\u002F\u002Fconversejs.org\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fconversejs.4.2.0.zip","2026-03-15T10:48:56.248Z",{"attackSurface":61,"codeSignals":162,"taintFlows":228,"riskAssessment":359,"analyzedAt":373},{"hooks":62,"ajaxHandlers":156,"restRoutes":157,"shortcodes":158,"cronEvents":159,"entryPointCount":24,"unprotectedCount":24},[63,69,74,79,84,88,92,96,100,104,108,112,116,120,124,128,132,136,139,143,148,152],{"type":64,"name":65,"callback":66,"file":67,"line":68},"filter","cron_schedules","cronSchedulesForConverseBank","console\\command.php",23,{"type":70,"name":71,"callback":72,"file":67,"line":73},"action","init","initHKDConversePlugin",33,{"type":70,"name":75,"callback":76,"file":77,"line":78},"admin_init","pluginActivateHKDConverseBank","includes\\activate.php",3,{"type":64,"name":80,"callback":81,"priority":11,"file":82,"line":83},"plugin_locale","changeLanguageConverseBank","includes\\language.php",4,{"type":70,"name":85,"callback":86,"file":87,"line":47},"plugins_loaded","hkd_init_converse_gateway_class","includes\\main.php",{"type":70,"name":89,"callback":90,"priority":11,"file":87,"line":91},"woocommerce_scheduled_subscription_payment","process_subscription_payment",128,{"type":70,"name":93,"callback":94,"file":87,"line":95},"woocommerce_api_delete_binding_converse_bank","delete_binding_converse_bank",134,{"type":70,"name":97,"callback":98,"file":87,"line":99},"woocommerce_api_converse_successful","webhook_converse_successful",142,{"type":70,"name":101,"callback":102,"file":87,"line":103},"woocommerce_api_converse_failed","webhook_converse_failed",147,{"type":70,"name":105,"callback":106,"file":87,"line":107},"admin_print_styles","enqueue_stylesheets",151,{"type":64,"name":109,"callback":110,"priority":24,"file":87,"line":111},"query_vars","queryVarsCards",157,{"type":64,"name":113,"callback":114,"file":87,"line":115},"woocommerce_account_menu_items","addCardLinkMenu",158,{"type":70,"name":117,"callback":118,"file":87,"line":119},"woocommerce_account_cards_endpoint","CardsPageContent",159,{"type":64,"name":121,"callback":122,"priority":13,"file":87,"line":123},"woocommerce_admin_order_actions","add_custom_order_status_actions_button",167,{"type":70,"name":125,"callback":126,"file":87,"line":127},"admin_head","add_custom_order_status_actions_button_css",168,{"type":70,"name":129,"callback":130,"priority":11,"file":87,"line":131},"woocommerce_order_status_changed","statusChangeHook",169,{"type":70,"name":133,"callback":134,"priority":11,"file":87,"line":135},"woocommerce_order_edit_status","statusChangeHookSubscription",170,{"type":70,"name":137,"callback":137,"file":87,"line":138},"cronCheckOrderConverseBank",176,{"type":70,"name":140,"callback":141,"priority":83,"file":142,"line":83},"woocommerce_thankyou","woocomerceShowErrorMessageConverseBank","includes\\thankyou.php",{"type":64,"name":144,"callback":145,"file":146,"line":147},"woocommerce_payment_gateways","hkdAddConverseBankGatewayClass","wc-hkdigital-converse-gateway.php",40,{"type":70,"name":149,"callback":150,"file":146,"line":151},"woocommerce_blocks_loaded","hkdigital_converse_woocommerce_blocks_support",57,{"type":70,"name":153,"callback":154,"file":146,"line":155},"woocommerce_blocks_payment_method_type_registration","closure",62,[],[],[],[160],{"hook":137,"callback":137,"file":67,"line":161},28,{"dangerousFunctions":163,"sqlUsage":164,"outputEscaping":169,"fileOperations":24,"externalRequests":226,"nonceChecks":24,"capabilityChecks":24,"bundledLibraries":227},[],{"prepared":24,"raw":14,"locations":165},[166],{"file":87,"line":167,"context":168},182,"$wpdb->get_results() with variable interpolation",{"escaped":170,"rawEcho":171,"locations":172},24,26,[173,176,178,180,182,184,186,188,190,192,194,196,198,200,202,204,206,208,210,212,214,216,218,220,222,224],{"file":87,"line":174,"context":175},451,"raw output",{"file":87,"line":177,"context":175},496,{"file":87,"line":179,"context":175},507,{"file":87,"line":181,"context":175},549,{"file":87,"line":183,"context":175},913,{"file":87,"line":185,"context":175},918,{"file":87,"line":187,"context":175},919,{"file":87,"line":189,"context":175},922,{"file":87,"line":191,"context":175},930,{"file":87,"line":193,"context":175},934,{"file":87,"line":195,"context":175},940,{"file":87,"line":197,"context":175},959,{"file":87,"line":199,"context":175},960,{"file":87,"line":201,"context":175},962,{"file":87,"line":203,"context":175},972,{"file":87,"line":205,"context":175},974,{"file":87,"line":207,"context":175},978,{"file":87,"line":209,"context":175},985,{"file":87,"line":211,"context":175},991,{"file":87,"line":213,"context":175},997,{"file":87,"line":215,"context":175},1010,{"file":87,"line":217,"context":175},1012,{"file":87,"line":219,"context":175},1026,{"file":87,"line":221,"context":175},1029,{"file":87,"line":223,"context":175},1174,{"file":142,"line":225,"context":175},18,21,[],[229,290,305,317,340,349],{"entryPoint":230,"graph":231,"unsanitizedCount":288,"severity":289},"hkd_init_converse_gateway_class (includes\\main.php:6)",{"nodes":232,"edges":280},[233,238,243,247,251,255,259,262,267,271,273,277],{"id":234,"type":235,"label":236,"file":87,"line":237},"n0","source","$_POST['hkd_converse_checkout_id']",79,{"id":239,"type":240,"label":241,"file":87,"line":237,"wp_function":242},"n1","sink","update_option() [Settings Manipulation]","update_option",{"id":244,"type":235,"label":245,"file":87,"line":246},"n2","$_REQUEST['orderId'] (x3)",1132,{"id":248,"type":240,"label":249,"file":87,"line":246,"wp_function":250},"n3","wp_remote_post() [SSRF]","wp_remote_post",{"id":252,"type":235,"label":253,"file":87,"line":254},"n4","$_REQUEST",1171,{"id":256,"type":240,"label":257,"file":87,"line":223,"wp_function":258},"n5","echo() [XSS]","echo",{"id":260,"type":235,"label":261,"file":87,"line":254},"n6","$_REQUEST (x2)",{"id":263,"type":240,"label":264,"file":87,"line":265,"wp_function":266},"n7","wp_redirect() [Open Redirect]",1175,"wp_redirect",{"id":268,"type":235,"label":269,"file":87,"line":270},"n8","$_GET['orderId']",1219,{"id":272,"type":240,"label":249,"file":87,"line":270,"wp_function":250},"n9",{"id":274,"type":235,"label":275,"file":87,"line":276},"n10","$_GET",1223,{"id":278,"type":240,"label":264,"file":87,"line":279,"wp_function":266},"n11",1234,[281,283,284,285,286,287],{"from":234,"to":239,"sanitized":282},false,{"from":244,"to":248,"sanitized":282},{"from":252,"to":256,"sanitized":282},{"from":260,"to":263,"sanitized":282},{"from":268,"to":272,"sanitized":282},{"from":274,"to":278,"sanitized":282},9,"medium",{"entryPoint":291,"graph":292,"unsanitizedCount":304,"severity":289},"webhook_converse_successful (includes\\main.php:1123)",{"nodes":293,"edges":300},[294,295,296,297,298,299],{"id":234,"type":235,"label":245,"file":87,"line":246},{"id":239,"type":240,"label":249,"file":87,"line":246,"wp_function":250},{"id":244,"type":235,"label":253,"file":87,"line":254},{"id":248,"type":240,"label":257,"file":87,"line":223,"wp_function":258},{"id":252,"type":235,"label":261,"file":87,"line":254},{"id":256,"type":240,"label":264,"file":87,"line":265,"wp_function":266},[301,302,303],{"from":234,"to":239,"sanitized":282},{"from":244,"to":248,"sanitized":282},{"from":252,"to":256,"sanitized":282},6,{"entryPoint":306,"graph":307,"unsanitizedCount":316,"severity":289},"webhook_converse_failed (includes\\main.php:1210)",{"nodes":308,"edges":313},[309,310,311,312],{"id":234,"type":235,"label":269,"file":87,"line":270},{"id":239,"type":240,"label":249,"file":87,"line":270,"wp_function":250},{"id":244,"type":235,"label":275,"file":87,"line":276},{"id":248,"type":240,"label":264,"file":87,"line":279,"wp_function":266},[314,315],{"from":234,"to":239,"sanitized":282},{"from":244,"to":248,"sanitized":282},2,{"entryPoint":318,"graph":319,"unsanitizedCount":288,"severity":289},"\u003Cmain> (includes\\main.php:0)",{"nodes":320,"edges":333},[321,322,323,324,325,326,327,328,329,330,331,332],{"id":234,"type":235,"label":236,"file":87,"line":237},{"id":239,"type":240,"label":241,"file":87,"line":237,"wp_function":242},{"id":244,"type":235,"label":245,"file":87,"line":246},{"id":248,"type":240,"label":249,"file":87,"line":246,"wp_function":250},{"id":252,"type":235,"label":253,"file":87,"line":254},{"id":256,"type":240,"label":257,"file":87,"line":223,"wp_function":258},{"id":260,"type":235,"label":261,"file":87,"line":254},{"id":263,"type":240,"label":264,"file":87,"line":265,"wp_function":266},{"id":268,"type":235,"label":269,"file":87,"line":270},{"id":272,"type":240,"label":249,"file":87,"line":270,"wp_function":250},{"id":274,"type":235,"label":275,"file":87,"line":276},{"id":278,"type":240,"label":264,"file":87,"line":279,"wp_function":266},[334,335,336,337,338,339],{"from":234,"to":239,"sanitized":282},{"from":244,"to":248,"sanitized":282},{"from":252,"to":256,"sanitized":282},{"from":260,"to":263,"sanitized":282},{"from":268,"to":272,"sanitized":282},{"from":274,"to":278,"sanitized":282},{"entryPoint":341,"graph":342,"unsanitizedCount":14,"severity":348},"__construct (includes\\main.php:44)",{"nodes":343,"edges":346},[344,345],{"id":234,"type":235,"label":236,"file":87,"line":237},{"id":239,"type":240,"label":241,"file":87,"line":237,"wp_function":242},[347],{"from":234,"to":239,"sanitized":282},"low",{"entryPoint":350,"graph":351,"unsanitizedCount":14,"severity":348},"\u003Crequest> (includes\\request.php:0)",{"nodes":352,"edges":357},[353,356],{"id":234,"type":235,"label":354,"file":355,"line":83},"$_POST","includes\\request.php",{"id":239,"type":240,"label":241,"file":355,"line":304,"wp_function":242},[358],{"from":234,"to":239,"sanitized":282},{"summary":360,"deductions":361},"The plugin 'hk-payment-gateway-for-converse' v1.1.0 exhibits a mixed security posture. While the static analysis indicates a very small attack surface with no apparent entry points directly exposed without authentication or permission checks, several concerning code signals emerge. The most significant is the presence of SQL queries that are not using prepared statements, posing a risk of SQL injection vulnerabilities. Additionally, a low percentage of output escaping is concerning, suggesting potential cross-site scripting (XSS) vulnerabilities. The high number of external HTTP requests, while not inherently a vulnerability, could be a vector for supply chain attacks if any of the external services are compromised or if the requests are not properly secured.\n\nThe taint analysis shows that all analyzed flows have unsanitized paths, although no critical or high severity issues were flagged. This indicates that data originating from user input is not being properly cleaned before being used in potentially sensitive operations. Given the absence of any recorded vulnerability history, this might suggest that critical flaws haven't been discovered or exploited yet, or that the plugin's limited exposure has so far mitigated the impact of existing weaknesses. However, the presence of unsanitized flows and the lack of robust input validation and output escaping remain significant concerns that warrant attention.\n\nIn conclusion, while the plugin's minimal attack surface and clean vulnerability history are positive indicators, the internal code analysis reveals substantial weaknesses in secure coding practices. The reliance on raw SQL queries and insufficient output escaping are critical areas that need immediate remediation to prevent potential exploitation. The unsanitized taint flows further compound these risks. It is crucial for the plugin developers to prioritize addressing these identified code quality issues to improve the overall security of the plugin.",[362,364,367,369,371],{"reason":363,"points":11},"SQL queries not using prepared statements",{"reason":365,"points":366},"Low percentage of properly escaped output",7,{"reason":368,"points":11},"Unsanitized taint flows found",{"reason":370,"points":47},"No nonce checks for entry points",{"reason":372,"points":47},"No capability checks for entry points","2026-03-17T01:18:45.618Z",{"wat":375,"direct":383},{"assetPaths":376,"generatorPatterns":378,"scriptPaths":379,"versionParams":380},[377],"\u002Fwp-content\u002Fplugins\u002Fhk-payment-gateway-for-converse\u002Fassets\u002Fimages\u002Flogo_converse.png",[],[],[381,382],"hk-payment-gateway-for-converse\u002Fassets\u002Fcss\u002Fwc-hkd-converse.css?ver=","hk-payment-gateway-for-converse\u002Fassets\u002Fjs\u002Fwc-hkd-converse.js?ver=",{"cssClasses":384,"htmlComments":386,"htmlAttributes":388,"restEndpoints":391,"jsGlobals":393,"shortcodeOutput":395},[385],"hkd-converse-payment-gateway",[387],"\u003C!-- WooCommerce Blocks support registration -->",[389,390],"data-checkout-id","data-payment-url",[392],"\u002Fwp-json\u002Fhk-payment-gateway-for-converse\u002Fv1\u002Fpayment",[394],"hkd_converse_params",[]]