PayPal Digital Goods For Woocommerce Security & Risk Analysis

wordpress.org/plugins/pal-digital-goods-express-checkout-for-woo

PayPal Digital Goods For Woocommerce. Develop by Official PayPal Partner.

10 active installs v1.0.0 PHP + WP 3.0.1+ Updated Aug 17, 2016
digital-goodsexpress-checkoutpaypalpaypal-digitalpaypal-digital-goods-express-checkout
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is PayPal Digital Goods For Woocommerce Safe to Use in 2026?

Generally Safe

Score 85/100

PayPal Digital Goods For Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 9yr ago
Risk Assessment

The "pal-digital-goods-express-checkout-for-woo" v1.0.0 plugin exhibits significant security concerns due to its unprotected entry points. With two AJAX handlers lacking any form of authentication or capability checks, there's a substantial risk of unauthorized actions being performed. While the plugin demonstrates good practices in SQL query handling and avoids dangerous functions, the lack of output escaping in a considerable portion of its code (81%) presents a high risk of Cross-Site Scripting (XSS) vulnerabilities. The absence of nonce checks on AJAX handlers further exacerbates the risk of CSRF attacks. The plugin's vulnerability history being clean is a positive indicator, suggesting either a lack of past exploitable issues or diligent patching. However, the current static analysis findings highlight critical areas that need immediate attention to prevent potential exploitation.

Key Concerns

  • Unprotected AJAX handlers
  • Missing nonce checks on AJAX
  • Low output escaping percentage
Vulnerabilities
None known

PayPal Digital Goods For Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Version History

PayPal Digital Goods For Woocommerce Release Timeline

v1.0.0Current
Code Analysis
Analyzed Apr 16, 2026

PayPal Digital Goods For Woocommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
13
3 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
1
Bundled Libraries
0

Output Escaping

19% escaped16 total outputs
Attack Surface
2 unprotected

PayPal Digital Goods For Woocommerce Attack Surface

Entry Points2
Unprotected2

AJAX Handlers 2

authwp_ajax_WPDG_do_express_checkoutincludes/class-woo-paypal-digital-goods-express-checkout.php:65
noprivwp_ajax_WPDG_do_express_checkoutincludes/class-woo-paypal-digital-goods-express-checkout.php:66
WordPress Hooks 5
actionwoocommerce_after_checkout_formincludes/class-woo-paypal-digital-goods-express-checkout-gateway.php:68
actionget_headerincludes/class-woo-paypal-digital-goods-express-checkout.php:64
filterwoocommerce_payment_gatewaysincludes/class-woo-paypal-digital-goods-express-checkout.php:118
actionplugins_loadedincludes/class-woo-paypal-digital-goods-express-checkout.php:134
actionplugins_loadedwoo-paypal-digital-goods-express-checkout.php:84
Maintenance & Trust

PayPal Digital Goods For Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested4.6.30
Last updatedAug 17, 2016
PHP min version
Downloads3K

Community Trust

Rating100/100
Number of ratings1
Active installs10
Developer Profile

PayPal Digital Goods For Woocommerce Developer Profile

wppaypalcontact

1 plugin · 10 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect PayPal Digital Goods For Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/pal-digital-goods-express-checkout-for-woo/assets/css/style.css
Script Paths
/wp-content/plugins/pal-digital-goods-express-checkout-for-woo/assets/js/script.js
Version Parameters
pal-digital-goods-express-checkout-for-woo/assets/css/style.css?ver=pal-digital-goods-express-checkout-for-woo/assets/js/script.js?ver=

HTML / DOM Fingerprints

CSS Classes
premiumdev-woo-pdge-express-checkout-container
HTML Comments
<!-- Start PayPal Digital Goods Express Checkout Button --><!-- End PayPal Digital Goods Express Checkout Button -->
Data Attributes
data-paypal-buttondata-button-typedata-button-colordata-button-shapedata-button-labeldata-button-layout
JS Globals
premiumdev_woo_pdge_params
Shortcode Output
[paypal_express_checkout_button]
FAQ

Frequently Asked Questions about PayPal Digital Goods For Woocommerce