[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fCVzeopRiC5laYNg_jNV6hGwUiZEaIzQfmAQCmhlz_IU":3,"$f50bYR6C_000YoGt5cfxTOisKSp5AOyrVwfgtydZphhg":109,"$fvEYLjccPDc67GStF9TReBKZX8S8vHMOtLct6YwfgatM":114},{"slug":4,"name":5,"version":6,"author":5,"author_profile":7,"description":8,"short_description":9,"active_installs":10,"downloaded":11,"rating":12,"num_ratings":12,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":20,"download_link":21,"security_score":22,"vuln_count":12,"unpatched_count":12,"last_vuln_date":23,"fetched_at":24,"discovery_status":25,"vulnerabilities":26,"developer":27,"crawl_stats":23,"alternatives":33,"analysis":34,"fingerprints":88},"lendingworks-retail-finance","Lending Works","1.0.0","https:\u002F\u002Fprofiles.wordpress.org\u002Flendingworksltd\u002F","\u003Cp>Lending Works matches investors directly with borrowers who want to spread the cost of their purchase. By cutting out the old financial institutions, we help your customers buy more for less. There are no hidden fees for you or customers. Just simple, flexible finance on purchases from £50 to £25,000. Lending Works isn’t like old fashioned financial services companies. We seamlessly connect people that want to invest their money with sensible borrowers who want to get a better rate on their personal loan, so both get a better deal. Rather than focusing exclusively on profits, we focus on being fair, transparent and honest. These values not only make us proud of the way we treat our customers, but also help us to set a new standard in financial services. This extension will add a new payment option, Lending Works Retail Finance, to your checkout. This allows customers to apply directly to Lending Works for finance when making a purchase, and if approved, proceed with the order in minutes. It works by connecting to our API, and launching our application checkout remotely, and synchronising order details between your database and ours. Learn more\u003C\u002Fp>\n\u003Cp>Why our solution is great for retailers\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Boost your sales – Offering finance can increase your sales by 17% and order value by 15%, on average. Source: Forrester\u003C\u002Fli>\n\u003Cli>Customers love us – From start to finish, you and your customers enjoy one seamless experience, online, in-store or over the phone. That’s why we’re rated 9.7 out of 10 on trust pilot.- Rocket science made simple – Our integration takes days, not months, and we support you all the way. See all your sales on one easy-to-use online account, or connect by API.\u003C\u002Fli>\n\u003Cli>Flexible finance – Split small purchases into 3 interest-free payments or Finance from 6 to 60 months on purchases from £250.00\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Account & Pricing\u003C\u002Fp>\n\u003Cp>\u003Cstrong>You must be signed up as an approved retailer to use this extension. Additional fees apply. If you would like to set up an account, please contact the sales department here: https:\u002F\u002Fwww.lendingworks.co.uk\u002Fretail-finance\u002Fcontact-sales. For pricing information, please visit our pricing page.\u003C\u002Fstrong>\u003C\u002Fp>\n\u003Cp>Features\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Adds a new payment method, Lending Works Retail Finance, to your checkout\u003C\u002Fli>\n\u003Cli>Stores Lending Works order data against the order in the WordPress database\u003C\u002Fli>\n\u003Cli>Adds the ability to manually mark the order as fulfilled from the administration area\u003C\u002Fli>\n\u003Cli>Adds minimum and maximum purchase values for using Retail Finance\u003C\u002Fli>\n\u003Cli>Allows for use of a development\u002Ftesting environment\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Security Features\u003C\u002Fp>\n\u003Cp>During the finance application, data entered into the checkout is collected and sent as an API request to the secure Lending Works servers, authenticated by an order token generated based on the API key entered by the retailer. You can read more about Lending Works\\’ security practices here: \u003Ca href=\"https:\u002F\u002Fpartner-support.lendingworks.co.uk\u002Fhc\u002Fen-us\u002Farticles\u002F360007116612-Data-security-at-Lending-Works\" rel=\"nofollow ugc\">https:\u002F\u002Fpartner-support.lendingworks.co.uk\u002Fhc\u002Fen-us\u002Farticles\u002F360007116612-Data-security-at-Lending-Works\u003C\u002Fa>\u003C\u002Fp>\n","Integrates Lending Works\\' Retail Finance checkout into your WooCommerce shop - for approved retailers, let your customers apply for finance quic …",10,1650,0,"2019-08-16T16:20:00.000Z","5.2.24","4.4","5.6",[18,19],"lending-works","lendingworks","https:\u002F\u002Fgithub.com\u002Flendingworks\u002Fwoocommerce-retail-finance","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Flendingworks-retail-finance.1.0.1.zip",85,null,"2026-03-15T15:16:48.613Z","no_bundle",[],{"slug":28,"display_name":5,"profile_url":7,"plugin_count":29,"total_installs":10,"avg_security_score":22,"avg_patch_time_days":30,"trust_score":31,"computed_at":32},"lendingworksltd",1,30,84,"2026-07-14T14:17:51.141Z",[],{"attackSurface":35,"codeSignals":47,"taintFlows":76,"riskAssessment":77,"analyzedAt":87},{"hooks":36,"ajaxHandlers":43,"restRoutes":44,"shortcodes":45,"cronEvents":46,"entryPointCount":12,"unprotectedCount":12},[37],{"type":38,"name":39,"callback":40,"priority":10,"file":41,"line":42},"action","plugins_loaded","\\WC_Lending_Works\\wc_lending_works_init","lendingworks.php",150,[],[],[],[],{"dangerousFunctions":48,"sqlUsage":49,"outputEscaping":51,"fileOperations":12,"externalRequests":12,"nonceChecks":12,"capabilityChecks":12,"bundledLibraries":75},[],{"prepared":12,"raw":12,"locations":50},[],{"escaped":12,"rawEcho":10,"locations":52},[53,57,58,60,62,65,67,69,71,73],{"file":54,"line":55,"context":56},"templates\\checkoutHandler.js.php",4,"raw output",{"file":54,"line":10,"context":56},{"file":54,"line":59,"context":56},14,{"file":54,"line":61,"context":56},22,{"file":63,"line":64,"context":56},"templates\\checkoutHandler.legacy.js.php",5,{"file":63,"line":66,"context":56},11,{"file":63,"line":68,"context":56},15,{"file":63,"line":70,"context":56},23,{"file":72,"line":55,"context":56},"templates\\checkoutHandler.testing.js.php",{"file":72,"line":74,"context":56},9,[],[],{"summary":78,"deductions":79},"The static analysis of 'lendingworks-retail-finance' v1.0.0 reveals a very limited attack surface, with no apparent AJAX handlers, REST API routes, shortcodes, or cron events. This is a strong indicator of a plugin that is not designed to expose many interaction points to the outside world. Furthermore, the absence of dangerous functions, file operations, and external HTTP requests is commendable. The reliance on prepared statements for SQL queries also suggests good database interaction practices.\n\nHowever, a significant concern arises from the complete lack of output escaping. With 10 identified outputs, 0% being properly escaped presents a high risk for Cross-Site Scripting (XSS) vulnerabilities. Any dynamic data displayed to users, if not properly sanitized before rendering, could be manipulated by attackers. Additionally, the complete absence of nonce checks and capability checks, especially given the lack of protected entry points, leaves any potential future or unknown vulnerabilities unmitigated by these common security measures. The vulnerability history shows no recorded issues, which is positive, but it does not negate the present risks identified in the code analysis.\n\nIn conclusion, while the plugin demonstrates strengths in minimizing its attack surface and handling database operations securely, the critical deficiency in output escaping poses a substantial XSS risk. The lack of nonce and capability checks further amplifies this concern, suggesting that the plugin may be underdeveloped in fundamental security practices. A thorough code review focused on output sanitation is highly recommended.",[80,83,85],{"reason":81,"points":82},"0% output escaping",8,{"reason":84,"points":64},"0 nonce checks",{"reason":86,"points":64},"0 capability checks","2026-03-17T00:57:48.760Z",{"wat":89,"direct":100},{"assetPaths":90,"generatorPatterns":93,"scriptPaths":94,"versionParams":97},[91,92],"\u002Fwp-content\u002Fplugins\u002Flendingworks-retail-finance\u002Fassets\u002Fcss\u002Ffrontend\u002Fcheckout.css","\u002Fwp-content\u002Fplugins\u002Flendingworks-retail-finance\u002Fassets\u002Fjs\u002Ffrontend\u002Fcheckout.js",[],[95,96],"\u002Fwp-content\u002Fplugins\u002Flendingworks-retail-finance\u002Ftemplates\u002FcheckoutHandler.js.php","\u002Fwp-content\u002Fplugins\u002Flendingworks-retail-finance\u002Ftemplates\u002FcheckoutHandler.legacy.js.php",[98,99],"lendingworks-retail-finance\u002Fassets\u002Fcss\u002Ffrontend\u002Fcheckout.css?ver=","lendingworks-retail-finance\u002Fassets\u002Fjs\u002Ffrontend\u002Fcheckout.js?ver=",{"cssClasses":101,"htmlComments":102,"htmlAttributes":103,"restEndpoints":105,"jsGlobals":106,"shortcodeOutput":108},[],[],[104],"data-lw-order-token",[],[107],"LendingWorksCheckout",[],{"error":110,"url":111,"statusCode":112,"statusMessage":113,"message":113},true,"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Flendingworks-retail-finance\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":12,"versions":115},[]]