Leyka Security & Risk Analysis

wordpress.org/plugins/leyka

Leyka is a plugin for crowdfunding and donations collection via WordPress website.

2K active installs v3.32.1 PHP 7.2.5+ WP 6.0+ Updated Mar 6, 2026
crowdfundingdonations%d0%bb%d0%b5%d0%b9%d0%ba%d0%b0fundraisingrecurring-donations
38
D · High Risk
CVEs total12
Unpatched2
Last CVEJul 1, 2025
Safety Verdict

Is Leyka Safe to Use in 2026?

High Risk

Score 38/100

Leyka carries significant security risk with 12 known CVEs, 2 still unpatched. Consider switching to a maintained alternative.

12 known CVEs 2 unpatched Last CVE: Jul 1, 2025Updated 28d ago
Risk Assessment

The "leyka" v3.32.1 plugin presents a mixed security posture. On the positive side, it demonstrates good practices in SQL query handling, with 73% using prepared statements, and a strong adherence to output escaping, with 98% of outputs properly sanitized. The presence of numerous nonce and capability checks (37 and 20 respectively) also indicates an effort to secure functionalities.

However, significant concerns arise from the attack surface and the plugin's vulnerability history. The plugin exposes 12 unprotected AJAX handlers, creating a substantial entry point for potential unauthorized actions or information disclosure. While taint analysis shows no critical or high severity flows, the 17 flows with unsanitized paths warrant further investigation. The plugin's history of 12 known CVEs, with 2 currently unpatched and including critical and high severity issues such as Remote File Inclusion and Authorization Bypass, is a major red flag. The prevalence of these vulnerability types suggests systemic weaknesses in how user inputs are handled and access controls are implemented.

In conclusion, while "leyka" v3.32.1 exhibits some good security practices, the high number of known, and particularly unpatched, vulnerabilities, coupled with a notable attack surface without authentication, makes it a high-risk plugin. The recurring patterns of severe vulnerability types suggest ongoing development or maintenance issues that need to be addressed proactively.

Key Concerns

  • Unpatched Critical CVE
  • Unpatched High Severity CVE (x2)
  • 12 unprotected AJAX handlers
  • 17 flows with unsanitized paths
  • Bundled DataTables library
  • Bundled Select2 library
  • Bundled Guzzle library
Vulnerabilities
12

Leyka Security Vulnerabilities

CVEs by Year

7 CVEs in 2023
2023
2 CVEs in 2024
2024
3 CVEs in 2025 · unpatched
2025
Patched Has unpatched

Severity Breakdown

Critical
1
High
2
Medium
9

12 total CVEs

CVE-2025-52805high · 8.1Improper Control of Filename for Include/Require Statement in PHP Program ('PHP Remote File Inclusion')

Leyka <= 3.31.9 - Unauthenticated Local File Inclusion

Jul 1, 2025Unpatched
CVE-2025-53275medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Leyka <= 3.31.9 - Authenticated (Contributor+) Stored Cross-Site Scripting

Jun 27, 2025Unpatched
CVE-2025-26766medium · 6.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Leyka <= 3.31.8 - Authenticated (Contributor+) Stored Cross-Site Scripting

Feb 14, 2025 Patched in 3.31.9 (5d)
CVE-2024-49252medium · 4.3Missing Authorization

Leyka <= 3.31.6 - Missing Authorization

Oct 14, 2024 Patched in 3.31.7 (5d)
CVE-2024-35683medium · 5.3Missing Authorization

Leyka <= 3.31.1 - Missing Authorization

Jun 6, 2024 Patched in 3.31.2 (7d)
CVE-2023-4917medium · 5.3Exposure of Sensitive Information to an Unauthorized Actor

Leyka <= 3.30.7 - Authenticated (Subscriber+) Sensitive Information Exposure

Sep 12, 2023 Patched in 3.30.7.1 (133d)
CVE-2023-2995medium · 4.4Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Leyka <= 3.30.3 - Authenticated (Administrator+) Stored Cross-Site Scripting

Aug 23, 2023 Patched in 3.30.3 (153d)
CVE-2023-39314medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Leyka <= 3.30.2 - Reflected Cross-Site Scripting

Aug 7, 2023 Patched in 3.30.3 (169d)
CVE-2023-33327critical · 9.8Authorization Bypass Through User-Controlled Key

Leyka <= 3.30.2 - Privilege Escalation via Admin Password Reset

May 22, 2023 Patched in 3.30.3 (246d)
CVE-2023-33325medium · 6.1Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Leyka <= 3.30.1 - Reflected Cross-Site Scripting

May 22, 2023 Patched in 3.30.2 (246d)
CVE-2023-27450high · 7.2Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

Leyka <= 3.29.2 - Unauthenticated Stored Cross-Site Scripting

Mar 3, 2023 Patched in 3.30 (326d)
CVE-2023-27442medium · 5.4Cross-Site Request Forgery (CSRF)

Leyka <= 3.29.2 - Cross-Site Request Forgery

Mar 3, 2023 Patched in 3.30 (326d)
Code Analysis
Analyzed Mar 16, 2026

Leyka Code Analysis

Dangerous Functions
0
Raw SQL Queries
30
81 prepared
Unescaped Output
95
4249 escaped
Nonce Checks
37
Capability Checks
20
File Operations
15
External Requests
18
Bundled Libraries
3

Bundled Libraries

DataTablesSelect2Guzzle

SQL Query Safety

73% prepared111 total queries

Output Escaping

98% escaped4344 total outputs
Data Flows
17 unsanitized

Data Flow Analysis

25 flows17 with unsanitized paths
_handle_service_calls (gateways\mixplat\leyka-class-mixplat-gateway.php:528)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
12 unprotected

Leyka Attack Surface

Entry Points70
Unprotected12

AJAX Handlers 50

authwp_ajax_send-card-checkgateways\demirbank\leyka-class-demirbank-gateway.php:364
noprivwp_ajax_send-card-checkgateways\demirbank\leyka-class-demirbank-gateway.php:365
authwp_ajax_leyka_send_donor_emailinc\donations\leyka-class-donations-management.php:50
authwp_ajax_leyka_send_feedbackinc\leyka-admin.php:56
authwp_ajax_leyka_get_campaigns_listinc\leyka-ajax.php:56
noprivwp_ajax_leyka_get_campaigns_listinc\leyka-ajax.php:57
authwp_ajax_leyka_recalculate_total_funded_amountinc\leyka-ajax.php:75
noprivwp_ajax_leyka_recalculate_total_funded_amountinc\leyka-ajax.php:76
authwp_ajax_leyka_ajax_get_gateway_redirect_datainc\leyka-ajax.php:195
noprivwp_ajax_leyka_ajax_get_gateway_redirect_datainc\leyka-ajax.php:196
authwp_ajax_leyka_donor_subscriptioninc\leyka-ajax.php:234
noprivwp_ajax_leyka_donor_subscriptioninc\leyka-ajax.php:235
authwp_ajax_leyka_set_campaign_photoinc\leyka-ajax.php:260
authwp_ajax_leyka_set_campaign_attachmentinc\leyka-ajax.php:285
authwp_ajax_leyka_set_campaign_templateinc\leyka-ajax.php:300
authwp_ajax_leyka_edit_campaign_sluginc\leyka-ajax.php:329
authwp_ajax_leyka_update_pm_listinc\leyka-ajax.php:351
authwp_ajax_leyka_upload_l10ninc\leyka-ajax.php:408
authwp_ajax_leyka_setup_donor_passwordinc\leyka-ajax.php:486
noprivwp_ajax_leyka_setup_donor_passwordinc\leyka-ajax.php:487
authwp_ajax_leyka_donor_logininc\leyka-ajax.php:539
noprivwp_ajax_leyka_donor_logininc\leyka-ajax.php:540
authwp_ajax_leyka_donor_password_reset_requestinc\leyka-ajax.php:620
noprivwp_ajax_leyka_donor_password_reset_requestinc\leyka-ajax.php:621
authwp_ajax_leyka_get_donations_history_pageinc\leyka-ajax.php:651
noprivwp_ajax_leyka_get_donations_history_pageinc\leyka-ajax.php:652
authwp_ajax_leyka_cancel_recurringinc\leyka-ajax.php:801
noprivwp_ajax_leyka_cancel_recurringinc\leyka-ajax.php:802
authwp_ajax_leyka_cancel_recurring_by_managerinc\leyka-ajax.php:821
authwp_ajax_leyka_reset_campaign_attachmentinc\leyka-ajax.php:841
authwp_ajax_leyka_usage_stats_yinc\leyka-ajax.php:869
authwp_ajax_leyka_donors_autocompleteinc\leyka-ajax.php:933
authwp_ajax_leyka_gateways_autocompleteinc\leyka-ajax.php:947
authwp_ajax_leyka_campaigns_autocompleteinc\leyka-ajax.php:963
authwp_ajax_leyka_donors_tags_autocompleteinc\leyka-ajax.php:1000
authwp_ajax_leyka_add_donor_commentinc\leyka-ajax.php:1042
authwp_ajax_leyka_delete_donor_commentinc\leyka-ajax.php:1074
authwp_ajax_leyka_save_editable_commentinc\leyka-ajax.php:1105
authwp_ajax_leyka_get_donor_donationsinc\leyka-ajax.php:1163
authwp_ajax_leyka_get_campaign_donationsinc\leyka-ajax.php:1240
authwp_ajax_leyka_get_recurring_subscription_donationsinc\leyka-ajax.php:1355
authwp_ajax_leyka_save_donor_descriptioninc\leyka-ajax.php:1378
authwp_ajax_leyka_save_donor_nameinc\leyka-ajax.php:1400
authwp_ajax_leyka_save_donor_tagsinc\leyka-ajax.php:1420
authwp_ajax_leyka_close_dashboard_bannerinc\leyka-ajax.php:1437
authwp_ajax_leyka_files_uploadinc\leyka-ajax.php:1471
authwp_ajax_leyka_bulk_edit_donorsinc\leyka-ajax.php:1510
authwp_ajax_leyka_delete_extensioninc\leyka-ajax.php:1537
authwp_ajax_leyka_support_packages_set_no_campaign_behaviorinc\leyka-ajax.php:1569
authwp_ajax_leyka_get_currencies_ratesinc\leyka-ajax.php:1574

Shortcodes 20

[leyka_engb_scale] extensions\engagement-banner\leyka-class-engagement-banner-extension.php:190
[leyka_engb_photo] extensions\engagement-banner\leyka-class-engagement-banner-extension.php:191
[leyka_sum] inc\leyka-shortcodes-new.php:8
[leyka_amount_collected] inc\leyka-shortcodes-new.php:9
[leyka_donations_count] inc\leyka-shortcodes-new.php:61
[leyka_donors_count] inc\leyka-shortcodes-new.php:111
[leyka_donations_list] inc\leyka-shortcodes-new.php:203
[leyka_donations_comments_list] inc\leyka-shortcodes-new.php:362
[leyka_supporters_list] inc\leyka-shortcodes-new.php:443
[leyka_bar] inc\leyka-shortcodes-new.php:524
[leyka_campaign_card_new] inc\leyka-shortcodes-new.php:525
[leyka_scale] inc\leyka-shortcodes.php:12
[leyka_campaign_card] inc\leyka-shortcodes.php:76
[leyka_payment_form] inc\leyka-shortcodes.php:215
[leyka_donation_form] inc\leyka-shortcodes.php:216
[leyka_campaign_form] inc\leyka-shortcodes.php:217
[leyka_donors_list] inc\leyka-shortcodes.php:259
[leyka_service_terms_text] inc\leyka-shortcodes.php:377
[leyka_inline_campaign] inc\leyka-shortcodes.php:443
[leyka_inline_campaign_small] inc\leyka-shortcodes.php:719
WordPress Hooks 301
actionenqueue_block_editor_assetseditor\leyka-blocks-assets.php:132
filterblock_categories_alleditor\leyka-blocks-category.php:14
filterleyka_modern_template_displayededitor\leyka-blocks-functions.php:13
actioniniteditor\leyka-blocks.php:13
actionadmin_enqueue_scriptsextensions\engagement-banner\leyka-class-engagement-banner-extension.php:44
actionleyka_render_custom_engb_multiselectextensions\engagement-banner\leyka-class-engagement-banner-extension.php:46
actionwp_enqueue_scriptsextensions\engagement-banner\leyka-class-engagement-banner-extension.php:187
actionwp_footerextensions\engagement-banner\leyka-class-engagement-banner-extension.php:188
actionleyka_init_actionsextensions\engagement-banner\leyka-class-engagement-banner-extension.php:425
actionleyka_init_actionsextensions\example\leyka-class-example-extension.php:110
actionleyka_render_custom_gds_integration_data_infoextensions\gds-integration\leyka-class-gds-integration-extension.php:84
filterleyka_procedure_addressextensions\gds-integration\leyka-class-gds-integration-extension.php:92
actionleyka_init_actionsextensions\gds-integration\leyka-class-gds-integration-extension.php:300
filterwp_using_themesextensions\gds-integration\leyka-gds-data-preparation.php:24
actionadd_meta_boxesextensions\merchandise\leyka-class-merchandise-extension.php:61
filterleyka_admin_donations_columns_namesextensions\merchandise\leyka-class-merchandise-extension.php:75
filterleyka_admin_donation_merchandise_column_contentextensions\merchandise\leyka-class-merchandise-extension.php:77
actionleyka_donation_info_data_post_contentextensions\merchandise\leyka-class-merchandise-extension.php:84
actionleyka_campaign_after_savingextensions\merchandise\leyka-class-merchandise-extension.php:87
filterleyka_campaign_constructor_metaextensions\merchandise\leyka-class-merchandise-extension.php:94
filterleyka_get_unknown_campaign_fieldextensions\merchandise\leyka-class-merchandise-extension.php:97
actionleyka_set_unknown_campaign_fieldextensions\merchandise\leyka-class-merchandise-extension.php:98
filterleyka_donation_constructor_metaextensions\merchandise\leyka-class-merchandise-extension.php:105
filterleyka_get_unknown_donation_fieldextensions\merchandise\leyka-class-merchandise-extension.php:108
actionleyka_set_unknown_donation_fieldextensions\merchandise\leyka-class-merchandise-extension.php:109
filterleyka_new_donation_specific_dataextensions\merchandise\leyka-class-merchandise-extension.php:112
filterleyka_email_manager_notification_placeholdersextensions\merchandise\leyka-class-merchandise-extension.php:115
filterleyka_email_manager_notification_placeholders_valuesextensions\merchandise\leyka-class-merchandise-extension.php:116
filterleyka_email_placeholders_help_list_contentextensions\merchandise\leyka-class-merchandise-extension.php:121
filterleyka_donations_export_headersextensions\merchandise\leyka-class-merchandise-extension.php:123
filterleyka_donations_export_lineextensions\merchandise\leyka-class-merchandise-extension.php:124
actionwp_enqueue_scriptsextensions\merchandise\leyka-class-merchandise-extension.php:128
actionleyka_template_star_after_amountextensions\merchandise\leyka-class-merchandise-extension.php:133
actionleyka_template_need-help_after_amountextensions\merchandise\leyka-class-merchandise-extension.php:134
actionadmin_enqueue_scriptsextensions\merchandise\leyka-class-merchandise-extension.php:251
actionleyka_render_custom_merchandise_libraryextensions\merchandise\leyka-class-merchandise-extension.php:254
actionleyka_save_custom_option-merchandise_libraryextensions\merchandise\leyka-class-merchandise-extension.php:257
actionleyka_init_actionsextensions\merchandise\leyka-class-merchandise-extension.php:1175
filterpost_classextensions\support-packages\leyka-class-support-packages-extension.php:225
filterleyka_js_localized_stringsextensions\support-packages\leyka-class-support-packages-extension.php:226
actionadmin_noticesextensions\support-packages\leyka-class-support-packages-extension.php:227
actionleyka_campaign_after_savingextensions\support-packages\leyka-class-support-packages-extension.php:228
actionadmin_enqueue_scriptsextensions\support-packages\leyka-class-support-packages-extension.php:241
actionleyka_set_support_packages_campaign_option_valueextensions\support-packages\leyka-class-support-packages-extension.php:243
actionleyka_render_custom_support_packages_settingsextensions\support-packages\leyka-class-support-packages-extension.php:250
actionleyka_save_custom_option-custom_support_packages_settingsextensions\support-packages\leyka-class-support-packages-extension.php:253
actionleyka_init_actionsextensions\support-packages\leyka-class-support-packages-extension.php:1022
actionadmin_page_leyka_donation_infoextensions\unisender\leyka-class-unisender-extension.php:134
actionadmin_enqueue_scriptsextensions\unisender\leyka-class-unisender-extension.php:135
actionleyka_donation_funded_status_changedextensions\unisender\leyka-class-unisender-extension.php:136
filterleyka_js_localized_stringsextensions\unisender\leyka-class-unisender-extension.php:137
actionleyka_init_actionsextensions\unisender\leyka-class-unisender-extension.php:402
actionleyka_init_actionsgateways\chronopay\leyka-class-chronopay-gateway.php:713
filterleyka_js_localized_stringsgateways\cp\leyka-class-cp-gateway.php:163
filterwp_mail_content_typegateways\cp\leyka-class-cp-gateway.php:324
actionleyka_init_actionsgateways\cp\leyka-class-cp-gateway.php:913
filterthe_contentgateways\demirbank\leyka-class-demirbank-gateway.php:195
actionwp_enqueue_scriptsgateways\demirbank\leyka-class-demirbank-gateway.php:255
actionleyka_init_actionsgateways\demirbank\leyka-class-demirbank-gateway.php:413
actionleyka_init_actionsgateways\dolyame\leyka-class-dolyame-gateway.php:347
actionleyka_init_actionsgateways\liqpay\leyka-class-liqpay-gateway.php:618
filterleyka_js_localized_stringsgateways\mixplat\leyka-class-mixplat-gateway.php:248
filterscript_loader_taggateways\mixplat\leyka-class-mixplat-gateway.php:249
actionleyka_init_actionsgateways\mixplat\leyka-class-mixplat-gateway.php:1905
actionleyka_init_actionsgateways\paymaster\leyka-class-paymaster-gateway.php:350
filterleyka_revo_template_final_submitgateways\paypal\leyka-class-paypal-gateway.php:1622
filterleyka_js_localized_stringsgateways\paypal\leyka-class-paypal-gateway.php:1623
actionleyka_init_actionsgateways\paypal\leyka-class-paypal-gateway.php:2098
filterleyka_js_localized_stringsgateways\payselection\leyka-class-payselection-gateway.php:173
actionleyka_init_actionsgateways\payselection\leyka-class-payselection-gateway.php:833
actionleyka_donation_status_funded_to_refundedgateways\qiwi\includes\Leyka_Qiwi_Gateway_Helper.php:17
actionleyka_qiwi_gateway_web_hookgateways\qiwi\includes\Leyka_Qiwi_Gateway_Web_Hook.php:8
actionleyka_init_actionsgateways\qiwi\leyka-class-qiwi-gateway.php:238
actionleyka_init_actionsgateways\quittance\leyka-class-quittance-gateway.php:185
actionleyka_donation_status_funded_to_refundedgateways\rbk\includes\Leyka_Rbk_Gateway_Helper.php:12
actionadmin_initgateways\rbk\includes\Leyka_Rbk_Gateway_Helper.php:56
actionleyka_init_actionsgateways\rbk\leyka-class-rbk-gateway.php:686
actionleyka_init_actionsgateways\robokassa\leyka-class-robokassa-gateway.php:577
actionleyka_init_actionsgateways\sber\leyka-class-sber-gateway.php:600
actionleyka_init_actionsgateways\stripe\leyka-class-stripe-gateway.php:705
actionleyka_init_actionsgateways\text\leyka-class-text-gateway.php:121
filterleyka_active_pm_listgateways\text\leyka-class-text-gateway.php:139
actionleyka_init_actionsgateways\tinkoff\leyka-class-tinkoff-gateway.php:567
actionleyka_init_actionsgateways\webpay\leyka-class-webpay-gateway.php:756
actionleyka_init_actionsgateways\yandex\leyka-class-yandex-gateway.php:1355
actionleyka_init_actionsgateways\yandex_phyz\leyka-class-yandex_phyz-gateway.php:382
filterdefault_hidden_columnsinc\admin-lists\leyka-class-donations-list-table.php:16
filterleyka_admin_donations_list_filterinc\admin-lists\leyka-class-donations-list-table.php:18
filterleyka_admin_donors_list_filterinc\admin-lists\leyka-class-donors-list-table.php:16
actionpre_user_queryinc\admin-lists\leyka-class-donors-list-table.php:17
filterleyka_admin_recurring_subscriptions_list_filterinc\admin-lists\leyka-class-recurring-subscriptions-list-table.php:20
actionadd_meta_boxesinc\donations\leyka-class-donations-management.php:17
actiontransition_post_statusinc\donations\leyka-class-donations-management.php:18
actionbefore_delete_postinc\donations\leyka-class-donations-management.php:22
actionbefore_delete_postinc\donations\leyka-class-donations-management.php:36
actionleyka_donation_funded_status_changedinc\donations\leyka-class-donations-management.php:64
actionleyka_new_rebill_donation_addedinc\donations\leyka-class-donations-management.php:90
actionleyka_donation_recurring_activity_changedinc\donations\leyka-class-donations-management.php:100
actionleyka_new_donation_addedinc\donations\leyka-class-donations-management.php:108
actionleyka_new_donation_addedinc\donations\leyka-class-donations-management.php:116
actionleyka_donation_recurring_activity_changedinc\donations\leyka-class-donations-management.php:117
actionleyka_donation_amount_changedinc\donations\leyka-class-donations-management.php:118
actionleyka_donation_total_amount_changedinc\donations\leyka-class-donations-management.php:119
actionleyka_donation_pm_changedinc\donations\leyka-class-donations-management.php:120
actionleyka_donation_campaign_changedinc\donations\leyka-class-donations-management.php:121
filterwp_mail_content_typeinc\donations\leyka-class-donations-management.php:427
filterwp_mail_content_typeinc\donations\leyka-class-donations-management.php:564
filterwp_mail_content_typeinc\donations\leyka-class-donations-management.php:715
filterwp_mail_content_typeinc\donations\leyka-class-donations-management.php:984
filterwp_mail_content_typeinc\donations\leyka-class-donations-management.php:1031
filterwp_mail_content_typeinc\donations\leyka-class-donations-management.php:1101
actionadmin_initinc\donations\leyka-class-donations-management.php:2236
filterposts_whereinc\donations\leyka-class-donations.php:423
filterposts_orderbyinc\donations\leyka-class-donations.php:675
filterposts_whereinc\donations\leyka-class-donations.php:932
actionleyka_after_save_option-send_plugin_statsinc\leyka-admin-functions.php:94
filteradmin_footer_textinc\leyka-admin-functions.php:164
filteradmin_body_classinc\leyka-admin-functions.php:197
actionleyka_set_terms_of_service_text_option_valueinc\leyka-admin-functions.php:250
filteradmin_body_classinc\leyka-admin.php:25
actionadmin_menuinc\leyka-admin.php:27
filterset-screen-optioninc\leyka-admin.php:30
filterset-screen-optioninc\leyka-admin.php:41
actionadmin_enqueue_scriptsinc\leyka-admin.php:52
actionadmin_initinc\leyka-admin.php:54
filterplugin_row_metainc\leyka-admin.php:58
actionleyka_pre_help_actionsinc\leyka-admin.php:63
actionleyka_pre_donor_info_actionsinc\leyka-admin.php:64
actionleyka_pre_donation_info_actionsinc\leyka-admin.php:65
actionleyka_pre_recurring_subscription_info_actionsinc\leyka-admin.php:66
actionleyka_pre_extension_settings_actionsinc\leyka-admin.php:67
actionleyka_pre_donation_info_actionsinc\leyka-admin.php:69
actionleyka_post_admin_actionsinc\leyka-admin.php:71
actionshow_user_profileinc\leyka-admin.php:76
actionedit_user_profileinc\leyka-admin.php:77
actionpersonal_options_updateinc\leyka-admin.php:81
actionedit_user_profile_updateinc\leyka-admin.php:82
filterleyka_view_options_allocationinc\leyka-admin.php:85
filteradmin_titleinc\leyka-admin.php:221
filterleyka_admin_portlet_titleinc\leyka-admin.php:242
filtermanage_users_columnsinc\leyka-admin.php:249
filtermanage_users_custom_columninc\leyka-admin.php:257
filterparent_fileinc\leyka-admin.php:401
actionleyka_admin_dashboard_portlets_rowinc\leyka-admin.php:591
filterpostbox_classes_dashboard_page_leyka_help_leyka_docs_infoinc\leyka-admin.php:1401
filterpostbox_classes_dashboard_page_leyka_help_leyka_feedbackinc\leyka-admin.php:1415
filterwp_mail_content_typeinc\leyka-admin.php:1442
filterwp_mail_content_typeinc\leyka-ajax.php:585
filterwp_mail_content_typeinc\leyka-ajax.php:770
actionadd_meta_boxesinc\leyka-class-campaign.php:15
actionsave_postinc\leyka-class-campaign.php:18
actionrestrict_manage_postsinc\leyka-class-campaign.php:20
actionpre_get_postsinc\leyka-class-campaign.php:21
filterpost_row_actionsinc\leyka-class-campaign.php:23
filterleyka_option_id-main_currencyinc\leyka-class-options-controller.php:41
filterleyka_option_value-commissioninc\leyka-class-options-controller.php:48
filterleyka_option_value-additional_donation_form_fields_libraryinc\leyka-class-options-controller.php:53
filterleyka_new_option_value-additional_donation_form_fields_libraryinc\leyka-class-options-controller.php:57
actionleyka_set_currency_main_option_valueinc\leyka-class-options-controller.php:76
actionleyka_set_receiver_country_option_valueinc\leyka-class-options-controller.php:85
actionleyka_single_campaign_sharinginc\leyka-class-payment-form.php:949
filterthe_contentinc\leyka-class-payment-form.php:955
actioninitinc\leyka-core.php:65
filterleyka_option_valueinc\leyka-core.php:73
actionwp_headinc\leyka-core.php:83
actioninitinc\leyka-core.php:88
actioninitinc\leyka-core.php:89
actioninitinc\leyka-core.php:90
actioninitinc\leyka-core.php:93
filterrequestinc\leyka-core.php:100
filterrewrite_rules_arrayinc\leyka-core.php:111
filterquery_varsinc\leyka-core.php:112
actionparse_requestinc\leyka-core.php:115
actionadmin_initinc\leyka-core.php:131
actionleyka_donation_funded_status_changedinc\leyka-core.php:136
actionadmin_bar_menuinc\leyka-core.php:157
filterauthenticateinc\leyka-core.php:163
actionwp_logininc\leyka-core.php:190
actioninitinc\leyka-core.php:211
actioninitinc\leyka-core.php:233
filtershow_admin_barinc\leyka-core.php:235
actionafter_password_resetinc\leyka-core.php:240
filterlogin_redirectinc\leyka-core.php:256
actionleyka_donor_account_createdinc\leyka-core.php:269
actionleyka_donor_account_not_createdinc\leyka-core.php:270
actionleyka_set_donor_accounts_available_option_valueinc\leyka-core.php:275
actionadmin_initinc\leyka-core.php:295
actionpre_get_postsinc\leyka-core.php:335
filterthe_contentinc\leyka-core.php:383
filterthe_contentinc\leyka-core.php:402
actionwp_headinc\leyka-core.php:404
actionpre_get_postsinc\leyka-core.php:459
filtertemplate_includeinc\leyka-core.php:461
actiontemplate_redirectinc\leyka-core.php:502
filterthe_contentinc\leyka-core.php:509
actionleyka_do_procedureinc\leyka-core.php:512
actionwp_loadedinc\leyka-core.php:515
actionwp_enqueue_scriptsinc\leyka-core.php:848
actionwp_enqueue_scriptsinc\leyka-core.php:849
actionwp_enqueue_scriptsinc\leyka-core.php:850
filterleyka_the_contentinc\leyka-core.php:1389
filterleyka_the_contentinc\leyka-core.php:1390
filterleyka_the_contentinc\leyka-core.php:1391
filterleyka_the_contentinc\leyka-core.php:1392
filterpost_updated_messagesinc\leyka-core.php:1674
filterpost_updated_messagesinc\leyka-core.php:1750
filtershow_admin_barinc\leyka-core.php:1876
filterdocument_title_partsinc\leyka-core.php:1879
filterwp_mail_content_typeinc\leyka-core.php:2144
filterwp_mail_content_typeinc\leyka-core.php:2183
actionleyka_enqueue_scriptsinc\leyka-extensions-api.php:185
filtersafe_style_cssinc\leyka-functions.php:59
filterwp_kses_allowed_htmlinc\leyka-functions.php:263
actiontransition_post_statusinc\leyka-functions.php:1827
filterleyka_notification_server_datainc\leyka-functions.php:2208
actionleyka_save_custom_option-commissioninc\leyka-functions.php:2640
actionafter_setup_themeinc\leyka-functions.php:2647
filtersingle_templateinc\leyka-functions.php:2781
filterpage_templateinc\leyka-functions.php:2782
actionleyka_enqueue_scriptsinc\leyka-gateways-api.php:302
filterleyka_payment_options_allocationinc\leyka-gateways-api.php:591
filterleyka_payment_options_allocationinc\leyka-gateways-api.php:1099
filterleyka_terms_of_service_textinc\leyka-hooks.php:57
filterthe_contentinc\leyka-hooks.php:74
filterleyka_terms_of_pd_usage_textinc\leyka-hooks.php:112
filterthe_contentinc\leyka-hooks.php:129
filterbody_classinc\leyka-hooks.php:174
filterposts_requestinc\leyka-hooks.php:184
filtertemplate_redirectinc\leyka-hooks.php:206
filterdocument_title_partsinc\leyka-hooks.php:237
filterpre_get_document_titleinc\leyka-hooks.php:250
filterleyka_option_value-currency_maininc\leyka-hooks.php:253
filterposts_resultsinc\leyka-hooks.php:258
filterleyka_option_valueinc\leyka-polylang.php:30
filterleyka_get_unknown_donation_fieldinc\leyka-polylang.php:44
filterleyka_get_unknown_campaign_fieldinc\leyka-polylang.php:47
filterleyka_hidden_donation_form_fieldsinc\leyka-polylang.php:75
filterlocaleinc\leyka-polylang.php:84
actionleyka_init_gateway_redirect_pageinc\leyka-polylang.php:87
actionpll_language_definedinc\leyka-polylang.php:90
filterleyka_init_options_meta_groupinc\leyka-polylang.php:94
actioninitinc\leyka-polylang.php:135
actionadmin_noticesinc\leyka-polylang.php:148
actioninitinc\leyka-polylang.php:193
actioninitinc\leyka-polylang.php:200
actionleyka_render_sectioninc\leyka-settings-rendering-utils.php:4
actionleyka_render_textinc\leyka-settings-rendering-utils.php:38
actionleyka_render_emailinc\leyka-settings-rendering-utils.php:82
actionleyka_render_fileinc\leyka-settings-rendering-utils.php:118
actionleyka_render_media_uploadinc\leyka-settings-rendering-utils.php:194
actionleyka_render_legendinc\leyka-settings-rendering-utils.php:276
actionleyka_render_numberinc\leyka-settings-rendering-utils.php:306
actionleyka_render_checkboxinc\leyka-settings-rendering-utils.php:340
actionleyka_render_multi_checkboxinc\leyka-settings-rendering-utils.php:389
actionleyka_render_radioinc\leyka-settings-rendering-utils.php:428
actionleyka_render_selectinc\leyka-settings-rendering-utils.php:492
actionleyka_render_multi_selectinc\leyka-settings-rendering-utils.php:541
actionleyka_render_static_textinc\leyka-settings-rendering-utils.php:613
actionleyka_render_textareainc\leyka-settings-rendering-utils.php:670
actionleyka_render_htmlinc\leyka-settings-rendering-utils.php:718
actionleyka_render_rich_htmlinc\leyka-settings-rendering-utils.php:758
actionleyka_render_colorpickerinc\leyka-settings-rendering-utils.php:799
actionleyka_render_campaign_selectinc\leyka-settings-rendering-utils.php:835
actionleyka_render_custom_additional_fields_libraryinc\leyka-settings-rendering-utils.php:1175
actionleyka_save_custom_option-additional_donation_form_fields_libraryinc\leyka-settings-rendering-utils.php:1309
actionleyka_render_custom_payments_amounts_optionsinc\leyka-settings-rendering-utils.php:1419
actionleyka_render_custom_payments_amounts_options_tabsinc\leyka-settings-rendering-utils.php:1496
actionleyka_save_custom_option-payments_single_amounts_optionsinc\leyka-settings-rendering-utils.php:1551
actionleyka_save_custom_option-payments_recurring_amounts_optionsinc\leyka-settings-rendering-utils.php:1552
actionleyka_render_custom_cryptocurrencies_wallets_optionsinc\leyka-settings-rendering-utils.php:1640
actionleyka_save_custom_option-cryptocurrencies_walletsinc\leyka-settings-rendering-utils.php:1698
actionleyka_render_custom_currencies_miscs_tabsinc\leyka-settings-rendering-utils.php:1727
actionleyka_save_custom_option-currencies_miscsinc\leyka-settings-rendering-utils.php:1796
filterleyka_get_the_excerptinc\leyka-shortcodes.php:167
filterleyka_get_the_excerptinc\leyka-shortcodes.php:168
filterleyka_get_the_excerptinc\leyka-shortcodes.php:169
filterleyka_get_the_excerptinc\leyka-shortcodes.php:170
actioninitinc\leyka-tmp-translations.php:175
actionwidgets_initinc\leyka-widgets.php:6
filterleyka_campaign_card_thumbnail_sizeinc\leyka-widgets.php:253
filterleyka_campaign_card_classinc\leyka-widgets.php:254
actionadmin_enqueue_scriptsinc\settings\controllers\leyka-class-cp-settings-controller.php:28
filterleyka_extension_validate_activationinc\settings\controllers\leyka-class-extension-settings-controller.php:40
actionleyka_extension_activationinc\settings\controllers\leyka-class-extension-settings-controller.php:43
actionleyka_extension_deactivationinc\settings\controllers\leyka-class-extension-settings-controller.php:44
filterleyka_option_info-receiver_legal_typeinc\settings\controllers\leyka-class-init-settings-controller.php:672
filterleyka_option_info-receiver_legal_typeinc\settings\controllers\leyka-class-mixplat-settings-controller.php:306
actionadmin_enqueue_scriptsinc\settings\controllers\leyka-class-settings-controller.php:45
actionleyka_settings_submitinc\settings-pages\leyka-settings-common.php:3
actionleyka_settings_payment_submitinc\settings-pages\leyka-settings-common.php:69
actionplugins_loadedleyka.php:179
actioninitleyka.php:184
filterwp_mail_content_typeprocedures\leyka-campaigns-targets-reaching-mailout.php:87
filterwp_mail_content_typeprocedures\leyka-send-deferred-emails.php:42
filterwp_using_themesprocedures\procedures-common.php:35
actionpre_get_poststemplates\leyka-need-help\leyka-need-help-init.php:7
filterthe_contenttemplates\leyka-need-help\leyka-need-help-init.php:20
actionpre_get_poststemplates\leyka-revo\leyka-revo-init.php:7
filterthe_contenttemplates\leyka-revo\leyka-revo-init.php:20
actionpre_get_poststemplates\leyka-star\leyka-star-init.php:7
filterthe_contenttemplates\leyka-star\leyka-star-init.php:20
Maintenance & Trust

Leyka Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedMar 6, 2026
PHP min version7.2.5
Downloads97K

Community Trust

Rating94/100
Number of ratings32
Active installs2K
Developer Profile

Leyka Developer Profile

VaultDweller

1 plugin · 2K total installs

36
trust score
Avg Security Score
38/100
Avg Patch Time
162 days
View full developer profile
Detection Fingerprints

How We Detect Leyka

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/leyka/assets/css/public.css/wp-content/plugins/leyka/assets/css/editor-style.css/wp-content/plugins/leyka/assets/js/blocks.js
Script Paths
/wp-content/plugins/leyka/assets/js/blocks.js
Version Parameters
leyka/assets/css/public.css?ver=leyka/assets/css/editor-style.css?ver=leyka/assets/js/blocks.js?ver=

HTML / DOM Fingerprints

CSS Classes
leyka-donation-form-wrapperleyka-new-templates-stylesleyka-editor-styles
Data Attributes
data-leyka-campaign-iddata-leyka-form-id
JS Globals
leyka_blockLEYKA_VERSION
Shortcode Output
[leyka-donation-form][leyka-campaign-widget][leyka-donations-list]
FAQ

Frequently Asked Questions about Leyka