NOWPayments for WooCommerce – Crypto Payment Gateway Security & Risk Analysis

wordpress.org/plugins/nowpayments-for-woocommerce

Accept Bitcoin, Ethereum, and 300+ cryptocurrencies in WooCommerce using the official NOWPayments crypto payment gateway.

4K active installs v1.4.0 PHP 5.2.4+ WP 4.9+ Updated Jul 15, 2026
bitcoin-payment-gatewaycrypto-checkoutcryptocurrency-paymentsethereumwoocommerce-crypto
78
B · Generally Safe
CVEs total1
Unpatched1
Last CVEJun 29, 2026
Safety Verdict

Is NOWPayments for WooCommerce – Crypto Payment Gateway Safe to Use in 2026?

Mostly Safe

Score 78/100

NOWPayments for WooCommerce – Crypto Payment Gateway is generally safe to use. 1 past CVE were resolved.

1 known CVE 1 unpatched Last CVE: Jun 29, 2026Updated 1mo ago
Risk Assessment

The "nowpayments-for-woocommerce" v1.2.9 plugin exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points significantly reduces the potential attack surface. Furthermore, the code signals indicate robust security practices, with no dangerous functions, all SQL queries using prepared statements, and all output properly escaped. The zero recorded CVEs and lack of historical vulnerabilities further bolster confidence in its security.

Vulnerabilities
1 published

NOWPayments for WooCommerce – Crypto Payment Gateway Security Vulnerabilities

CVEs by Year

1 CVE in 2026 · unpatched
2026
Patched Has unpatched

Severity Breakdown

Medium
1

1 total CVE

CVE-2026-39448medium · 5.3Missing Authorization

NOWPayments for WooCommerce – Crypto Payment Gateway <= 1.4.0 - Missing Authorization

Jun 29, 2026Unpatched
Version History

NOWPayments for WooCommerce – Crypto Payment Gateway Release Timeline

v1.4.0Current1 CVE
v1.3.01 CVE
v1.2.91 CVE
v1.2.81 CVE
v1.2.71 CVE
v1.2.61 CVE
v1.2.51 CVE
v1.2.41 CVE
v1.2.31 CVE
v1.2.21 CVE
v1.2.11 CVE
v1.2.01 CVE
v1.1.31 CVE
v1.1.21 CVE
v1.1.11 CVE
v1.11 CVE
v1.0.51 CVE
v1.0.41 CVE
v1.0.31 CVE
v1.0.21 CVE
Code Analysis
Analyzed Mar 16, 2026

NOWPayments for WooCommerce – Crypto Payment Gateway Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
0
18 escaped
Nonce Checks
0
Capability Checks
0
File Operations
2
External Requests
0
Bundled Libraries
1

Bundled Libraries

Freemius1.0

Output Escaping

100% escaped18 total outputs
Attack Surface

NOWPayments for WooCommerce – Crypto Payment Gateway Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 13
actionwoocommerce_api_npwc_gatewayincludes\class-gateway.php:25
filterwoocommerce_payment_gatewaysincludes\class-gateway.php:270
actionwoocommerce_api_npwc_gatewayincludes\class-npwc-gateway.php:35
actionadmin_noticesincludes\class-npwc-init.php:66
actionwoocommerce_blocks_loadedincludes\class-npwc-init.php:93
filterplugin_row_metaincludes\class-npwc-init.php:120
actionadmin_enqueue_scriptsincludes\class-npwc-init.php:121
actionadmin_noticesincludes\class-npwc-init.php:128
actionadmin_post_npwc_hide_noticeincludes\class-npwc-init.php:129
actionwoocommerce_product_options_pricingincludes\class-npwc-init.php:135
actionwoocommerce_blocks_payment_method_type_registrationincludes\class-npwc-init.php:252
filterwoocommerce_payment_gatewaysincludes\wc-gateway-register.php:25
actionplugins_loadednowpayments-for-woocommerce.php:79
Maintenance & Trust

NOWPayments for WooCommerce – Crypto Payment Gateway Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.5
Last updatedJul 15, 2026
PHP min version5.2.4
Downloads43K

Community Trust

Rating84/100
Number of ratings14
Active installs4K
Developer Profile

NOWPayments for WooCommerce – Crypto Payment Gateway Developer Profile

CoderPress

10 plugins · 5K total installs

85
trust score
Avg Security Score
95/100
Avg Patch Time
46 days
View full developer profile
Detection Fingerprints

How We Detect NOWPayments for WooCommerce – Crypto Payment Gateway

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/nowpayments-for-woocommerce/assets/js/scripts.js/wp-content/plugins/nowpayments-for-woocommerce/assets/images/
Script Paths
/wp-content/plugins/nowpayments-for-woocommerce/freemius/start.php
Version Parameters
nowpayments-for-woocommerce/assets/js/scripts.js?ver=

HTML / DOM Fingerprints

CSS Classes
npwc-sc-notice
Data Attributes
data-pay-button-textdata-pay-button-color
JS Globals
npwc
FAQ

Frequently Asked Questions about NOWPayments for WooCommerce – Crypto Payment Gateway