Klamra Paycal for Aspaclaria Security & Risk Analysis

wordpress.org/plugins/klamra-paycal-for-aspaclaria

Accept payments and send invoices easily in WooCommerce using PayCal.

0 active installs v1.0.6 PHP 7.4+ WP 6.0+ Updated Apr 3, 2026
bitcheckoutinvoicespaymentswoocommerce
99
A · Safe
CVEs total1
Unpatched0
Last CVEJun 5, 2026
Safety Verdict

Is Klamra Paycal for Aspaclaria Safe to Use in 2026?

Generally Safe

Score 99/100

Klamra Paycal for Aspaclaria has a strong security track record. Known vulnerabilities have been patched promptly. It's a solid choice for most WordPress installations.

1 known CVELast CVE: Jun 5, 2026Updated 4mo ago
Risk Assessment

The klamra-paycal-for-aspaclaria plugin v1.0.3 exhibits a generally strong security posture, with no known historical vulnerabilities and a good implementation of security best practices. The static analysis reveals a minimal attack surface with no direct entry points like AJAX handlers, REST API routes, or shortcodes that lack authentication checks. The code also demonstrates a commendable use of prepared statements for SQL queries and a high percentage of properly escaped output, mitigating common web vulnerabilities.

Key Concerns

  • Flow with unsanitized path
  • External HTTP request without clear sanitization
  • Output escaping not fully comprehensive
Vulnerabilities
1 published

Klamra Paycal for Aspaclaria Security Vulnerabilities

CVEs by Year

1 CVE in 2026
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2026-8611medium · 4.3Authorization Bypass Through User-Controlled Key

Klamra Paycal for Aspaclaria <= 1.1.4 - Insecure Direct Object Reference to Authenticated (Subscriber+) Sensitive Information Exposure via 'invoice_id' Parameter

Jun 5, 2026 Patched in 1.1.5 (1d)
Version History

Klamra Paycal for Aspaclaria Release Timeline

v1.0.6Current1 CVE
v1.0.51 CVE
v1.0.41 CVE
v1.0.31 CVE
v1.0.21 CVE
Code Analysis
Analyzed Mar 17, 2026

Klamra Paycal for Aspaclaria Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
18
109 escaped
Nonce Checks
4
Capability Checks
9
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

86% escaped127 total outputs
Data Flows · Security
1 unsanitized

Data Flow Analysis

8 flows1 with unsanitized paths
render (includes\Admin\Page_License.php:10)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Klamra Paycal for Aspaclaria Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 28
actionadmin_noticesincludes\Core\Notices.php:8
actionadmin_initincludes\Core\Plugin.php:10
actionpaycal_license_revalidateincludes\Core\Plugin.php:11
actionadmin_menuincludes\Core\Plugin.php:13
actionadmin_enqueue_scriptsincludes\Core\Plugin.php:14
actionplugins_loadedincludes\Core\Plugin.php:17
actionplugins_loadedincludes\Core\Plugin.php:18
actionadd_meta_boxesincludes\Modules\Bit\BitAdminActions.php:8
actionadmin_post_paycal_bit_mark_paidincludes\Modules\Bit\BitAdminActions.php:9
actionwoocommerce_thankyouincludes\Modules\Bit\BitCheckoutUI.php:10
actionwoocommerce_before_pay_actionincludes\Modules\Bit\BitCheckoutUI.php:11
actionwp_enqueue_scriptsincludes\Modules\Bit\BitCheckoutUI.php:12
filterwoocommerce_payment_gatewaysincludes\Modules\Bit\BitGatewayLoader.php:23
actionwp_enqueue_scriptsincludes\Modules\Bit\BitGatewayLoader.php:29
actioninitincludes\Modules\Bit\BitOrderStatus.php:8
filterwc_order_statusesincludes\Modules\Bit\BitOrderStatus.php:9
filterwoocommerce_thankyou_order_received_textincludes\Modules\Bit\BitThankYouText.php:8
actionwoocommerce_checkout_processincludes\Modules\Bit\Gateway\class-wc-gateway-asp-bit.php:24
actionwoocommerce_checkout_create_orderincludes\Modules\Bit\Gateway\class-wc-gateway-asp-bit.php:25
actionadmin_menuincludes\Modules\Invoices\Legacy\admin\settings.php:4
actionadmin_enqueue_scriptsincludes\Modules\Invoices\Legacy\admin\settings.php:23
actioninitincludes\Modules\Invoices\Legacy\includes\cpt.php:4
filtermanage_asp_invoice_posts_columnsincludes\Modules\Invoices\Legacy\includes\cpt.php:14
actionmanage_asp_invoice_posts_custom_columnincludes\Modules\Invoices\Legacy\includes\cpt.php:20
actionpublish_asp_invoiceincludes\Modules\Invoices\Legacy\includes\email.php:4
actionwoocommerce_order_status_processingincludes\Modules\Invoices\Legacy\includes\order-hook.php:41
actionwoocommerce_order_status_completedincludes\Modules\Invoices\Legacy\includes\order-hook.php:47
actionadmin_post_paycal_invoice_downloadincludes\Modules\Invoices\Legacy\includes\pdf\download.php:4

Scheduled Events 1

paycal_license_revalidate
Maintenance & Trust

Klamra Paycal for Aspaclaria Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedApr 3, 2026
PHP min version7.4
Downloads289

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Klamra Paycal for Aspaclaria Developer Profile

klamra22

1 plugin · 0 total installs

99
trust score
Avg Security Score
99/100
Avg Patch Time
1 days
View full developer profile
Detection Fingerprints

How We Detect Klamra Paycal for Aspaclaria

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/klamra-paycal-for-aspaclaria/assets/admin.css/wp-content/plugins/klamra-paycal-for-aspaclaria/assets/admin.js/wp-content/plugins/klamra-paycal-for-aspaclaria/assets/front.css/wp-content/plugins/klamra-paycal-for-aspaclaria/assets/front.js/wp-content/plugins/klamra-paycal-for-aspaclaria/includes/Modules/Bit/Gateway/assets/css/style.css/wp-content/plugins/klamra-paycal-for-aspaclaria/includes/Modules/Bit/Gateway/assets/js/asp.js
Script Paths
/wp-content/plugins/klamra-paycal-for-aspaclaria/assets/admin.js/wp-content/plugins/klamra-paycal-for-aspaclaria/assets/front.js/wp-content/plugins/klamra-paycal-for-aspaclaria/includes/Modules/Bit/Gateway/assets/js/asp.js
Version Parameters
klamra-paycal-for-aspaclaria/assets/admin.css?ver=klamra-paycal-for-aspaclaria/assets/admin.js?ver=klamra-paycal-for-aspaclaria/assets/front.css?ver=klamra-paycal-for-aspaclaria/assets/front.js?ver=klamra-paycal-for-aspaclaria/includes/Modules/Bit/Gateway/assets/css/style.css?ver=klamra-paycal-for-aspaclaria/includes/Modules/Bit/Gateway/assets/js/asp.js?ver=

HTML / DOM Fingerprints

CSS Classes
paycal-payboxpaycal-paybox__headerpaycal-paybox__titlepaycal-paybox__subtitlepaycal-paybox__gridpaycal-paybox__leftpaycal-rowpaycal-label+12 more
HTML Comments
<!-- Keep it simple for MVP --><!-- Back-compat constants (older code) --><!-- If PayCal Core menu exists, attach there. Otherwise attach under WooCommerce. --><!-- Load gateway class -->+30 more
Data Attributes
data-copydata-qr
JS Globals
PAYCAL
FAQ

Frequently Asked Questions about Klamra Paycal for Aspaclaria