NOWPayments for WooCommerce – Crypto Payment Gateway Security & Risk Analysis

wordpress.org/plugins/nowpayments-for-woocommerce

Accept Bitcoin, Ethereum, and 300+ cryptocurrencies in WooCommerce using the official NOWPayments crypto payment gateway.

3K active installs v1.2.9 PHP 5.2.4+ WP 4.9+ Updated Feb 25, 2026
bitcoin-payment-gatewaycrypto-checkoutcryptocurrency-paymentsethereumwoocommerce-crypto
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is NOWPayments for WooCommerce – Crypto Payment Gateway Safe to Use in 2026?

Generally Safe

Score 100/100

NOWPayments for WooCommerce – Crypto Payment Gateway has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "nowpayments-for-woocommerce" v1.2.9 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points significantly reduces the potential attack surface. Furthermore, the code signals indicate robust security practices, with no dangerous functions, all SQL queries using prepared statements, and all output properly escaped. The zero recorded CVEs and lack of historical vulnerabilities further bolster confidence in its security.

Vulnerabilities
None known

NOWPayments for WooCommerce – Crypto Payment Gateway Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

NOWPayments for WooCommerce – Crypto Payment Gateway Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
18 escaped
Nonce Checks
0
Capability Checks
0
File Operations
2
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

100% escaped18 total outputs
Attack Surface

NOWPayments for WooCommerce – Crypto Payment Gateway Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 13
actionwoocommerce_api_npwc_gatewayincludes\class-gateway.php:25
filterwoocommerce_payment_gatewaysincludes\class-gateway.php:270
actionwoocommerce_api_npwc_gatewayincludes\class-npwc-gateway.php:35
actionadmin_noticesincludes\class-npwc-init.php:66
actionwoocommerce_blocks_loadedincludes\class-npwc-init.php:93
filterplugin_row_metaincludes\class-npwc-init.php:120
actionadmin_enqueue_scriptsincludes\class-npwc-init.php:121
actionadmin_noticesincludes\class-npwc-init.php:128
actionadmin_post_npwc_hide_noticeincludes\class-npwc-init.php:129
actionwoocommerce_product_options_pricingincludes\class-npwc-init.php:135
actionwoocommerce_blocks_payment_method_type_registrationincludes\class-npwc-init.php:252
filterwoocommerce_payment_gatewaysincludes\wc-gateway-register.php:25
actionplugins_loadednowpayments-for-woocommerce.php:79
Maintenance & Trust

NOWPayments for WooCommerce – Crypto Payment Gateway Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 25, 2026
PHP min version5.2.4
Downloads34K

Community Trust

Rating88/100
Number of ratings10
Active installs3K
Developer Profile

NOWPayments for WooCommerce – Crypto Payment Gateway Developer Profile

CoderPress

7 plugins · 4K total installs

88
trust score
Avg Security Score
100/100
Avg Patch Time
33 days
View full developer profile
Detection Fingerprints

How We Detect NOWPayments for WooCommerce – Crypto Payment Gateway

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/nowpayments-for-woocommerce/assets/js/scripts.js/wp-content/plugins/nowpayments-for-woocommerce/assets/images/
Script Paths
/wp-content/plugins/nowpayments-for-woocommerce/freemius/start.php
Version Parameters
nowpayments-for-woocommerce/assets/js/scripts.js?ver=

HTML / DOM Fingerprints

CSS Classes
npwc-sc-notice
Data Attributes
data-pay-button-textdata-pay-button-color
JS Globals
npwc
FAQ

Frequently Asked Questions about NOWPayments for WooCommerce – Crypto Payment Gateway