[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fPOzPf_fLj1MBou9qs-RDjJ1Xx-9BqilxLu1tawNEZj0":3,"$feHvq2aOtpWWbwk1YO3q1CNRYRuz4D7MOeSqgo7XKM44":214,"$ftXse7cnVVzidFmow7BQ8uT_AYdldocQ2K59WVXvgDM4":218},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":11,"num_ratings":11,"last_updated":13,"tested_up_to":14,"requires_at_least":15,"requires_php":16,"tags":17,"homepage":22,"download_link":23,"security_score":24,"vuln_count":11,"unpatched_count":11,"last_vuln_date":25,"fetched_at":26,"discovery_status":27,"vulnerabilities":28,"developer":29,"crawl_stats":25,"alternatives":34,"analysis":35,"fingerprints":193},"paydart","PayDart","1.0.0","serviceproviderpaydart","https:\u002F\u002Fprofiles.wordpress.org\u002Fserviceproviderpaydart\u002F","\u003Cp>Welcome to the official PayDart plugin for Woocommerce. PayDart is ideal for Woocommerce and WordPress merchants since it allows them to give their customers a seamless, super-fast checkout experience backed by cutting-edge payments technology that powers India’s largest payments platform. Accept payments from over 100+ payment sources including credit cards, debit cards, netbanking from 10+ banks, UPI options. Here are a few reasons why Woocommerce merchants should choose PayDart.\u003C\u002Fp>\n\u003Ch3>Compatibilities and Dependencies\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>WordPress v3.9.2 or higher\u003C\u002Fli>\n\u003Cli>Woocommerce v2.4 or higher\u003C\u002Fli>\n\u003Cli>PHP v7.0.0 or higher\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Features\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Largest scale:  Preferred by 200+ consumers in India.\u003C\u002Fli>\n\u003Cli>Superior technology: Industry best success rates & 99.99% Up-time, Capable of supporting 3x more transactions per second than other payment gateways.\u003C\u002Fli>\n\u003Cli>Powerful dashboard: Get payment analytics at your fingerprints. Get insights by payment source and customer cohorts.\u003C\u002Fli>\n\u003Cli>Instant refunds: Initiate refunds seamlessly with just a click right from your PayDart for business dashboard.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Getting Started\u003C\u002Fh3>\n\u003Cp>New to PayDartPG? Use this \u003Ca href=\"https:\u002F\u002Fpaydart.co\" rel=\"nofollow ugc\">link\u003C\u002Fa> to create your PayDart for Business account and get access to exciting offers.\u003C\u002Fp>\n\u003Cp>Before enabling the PayDart on Woocommerce, make sure you have a registered business account with PayDart. Please visit –\u003Cbr \u002F>\n\u003Ca href=\"https:\u002F\u002Fpaydart.co\" rel=\"nofollow ugc\">PayDart Dashboard\u003C\u002Fa> to sign-up\u003C\u002Fp>\n\u003Ch3>Step-1: Generate your API keys with PayDart\u003C\u002Fh3>\n\u003Cp>To generate the API Key,\u003Cbr \u002F>\n* Please email us with your login credentials to get Merchant Key & Secret.\u003C\u002Fp>\n\u003Cp>Note: You have to generate separate API Keys for the test and live modes. No money is deducted from your account in test mode.\u003Cbr \u002F>\nMID and merchant keys generation may take few minutes. In case you do not see these details, please logout and login after 5 minutes. Proceed now to generate these keys.\u003C\u002Fp>\n\u003Ch3>Step-2: Plugin Installation\u003C\u002Fh3>\n\u003Cp>There are 2 ways of installing the PayDart plugin:-\u003Cbr \u002F>\ni)  Download the plugin repository from\u003Cbr \u002F>\n            OR\u003Cbr \u002F>\nii) Install the plugin directly from the WordPress dashboard\u003C\u002Fp>\n\u003Cp>Note: In case you have installed the plugin directly from the wordpress dashboard, skip to Step-3. In case you have downloaded the repository from here, follow the steps below to complete the installation.\u003C\u002Fp>\n\u003Ch3>Steps after downloading the plugin\u003C\u002Fh3>\n\u003Col>\n\u003Cli>Unzip and open the downloaded folder.\u003C\u002Fli>\n\u003Cli>Copy the PayDart folder from the unzipped folder.\u003C\u002Fli>\n\u003Cli>Paste it into \u002Fwp-content\u002Fplugins\u002F directory or you may choose to upload the PayDart folder via the Woocommerce Webstore Admin panel.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>Step-3: Configuration\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Log into your WordPress admin and activate the PayDart plugin in WordPress Plugin Manager.\u003C\u002Fli>\n\u003Cli>Log into your WooCommerce Webstore account, navigate to Settings and click the Checkout\u002FPayment Gateways tab\u003C\u002Fli>\n\u003Cli>Scroll down to the Checkout page and go to the setting option of PayDart under Gateway Display\u003C\u002Fli>\n\u003Cli>Click on PayDart to edit the settings. If you do not see PayDart in the list at the top of the screen make sure you have activated the plugin in the WordPress Plugin Manager\u003C\u002Fli>\n\u003Cli>Fill in the following credentials.\n\u003Cul>\n\u003Cli>Enable – Enable check box\u003C\u002Fli>\n\u003Cli>Title – PayDart\u003C\u002Fli>\n\u003Cli>Description – Default\u003C\u002Fli>\n\u003Cli>Merchant Identifier – Staging\u002FProduction MID provided by PayDart\u003C\u002Fli>\n\u003Cli>Secret Key – Staging\u002FProduction Key provided by PayDart\u003C\u002Fli>\n\u003Cli>Environment – Select environment type\u003C\u002Fli>\n\u003C\u002Ful>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Your PayDart is enabled. Now you can accept payment through PayDart.\u003Cbr \u002F>\nIn case of any issues with integration, please \u003Ca href=\"https:\u002F\u002Fwww.paydart.co\u002Fcontact-us\" rel=\"nofollow ugc\">get in touch\u003C\u002Fa>.\u003C\u002Fp>\n","Welcome to the official PayDart plugin for Woocommerce. PayDart is ideal for Woocommerce and Wordpress merchants since it allows them to give their cu …",0,617,"2023-01-09T09:22:00.000Z","6.1.10","4.0.1","5.6",[4,18,19,20,21],"paydart-payments","paydart-plugin","paydart-woocommerce","paywithpaydart","https:\u002F\u002Fwww.paydart.co\u002Fpaydart","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpaydart.zip",85,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":30,"total_installs":11,"avg_security_score":24,"avg_patch_time_days":31,"trust_score":32,"computed_at":33},1,30,84,"2026-05-20T10:11:43.164Z",[],{"attackSurface":36,"codeSignals":97,"taintFlows":116,"riskAssessment":184,"analyzedAt":192},{"hooks":37,"ajaxHandlers":88,"restRoutes":94,"shortcodes":95,"cronEvents":96,"entryPointCount":30,"unprotectedCount":11},[38,44,48,51,55,59,64,68,72,76,81,85],{"type":39,"name":40,"callback":41,"file":42,"line":43},"action","init","check_paydart_response","class.paydart.php",43,{"type":39,"name":45,"callback":46,"file":42,"line":47},"woocommerce_update_options_payment_gateways_paydart","process_admin_options",47,{"type":39,"name":49,"callback":46,"file":42,"line":50},"woocommerce_update_options_payment_gateways",49,{"type":39,"name":52,"callback":53,"file":42,"line":54},"woocommerce_receipt_paydart","receipt_page",51,{"type":39,"name":56,"callback":57,"file":42,"line":58},"admin_enqueue_scripts","paydart_enqueue_script",589,{"type":39,"name":60,"callback":61,"file":62,"line":63},"wp_head","paydartWoopayment_enqueue_style","woo-paydart.php",78,{"type":39,"name":65,"callback":66,"file":62,"line":67},"add_meta_boxes","add_paydart_block",82,{"type":39,"name":69,"callback":70,"file":62,"line":71},"admin_head","woocommerce_paydart_add_css_js",196,{"type":39,"name":73,"callback":74,"priority":11,"file":62,"line":75},"plugins_loaded","woocommerce_paydart_init",303,{"type":77,"name":78,"callback":79,"file":62,"line":80},"filter","woocommerce_payment_gateways","woocommerce_add_paydart_gateway",312,{"type":39,"name":82,"callback":83,"file":62,"line":84},"the_content","paydartResponseMessage",325,{"type":39,"name":60,"callback":86,"file":62,"line":87},"woocommerce_paydart_front_add_css",328,[89],{"action":90,"nopriv":91,"callback":90,"hasNonce":92,"hasCapCheck":91,"file":62,"line":93},"savetxnstatus",false,true,249,[],[],[],{"dangerousFunctions":98,"sqlUsage":99,"outputEscaping":102,"fileOperations":11,"externalRequests":30,"nonceChecks":30,"capabilityChecks":11,"bundledLibraries":115},[],{"prepared":100,"raw":11,"locations":101},8,[],{"escaped":103,"rawEcho":104,"locations":105},34,4,[106,109,111,113],{"file":42,"line":107,"context":108},234,"raw output",{"file":42,"line":110,"context":108},243,{"file":62,"line":112,"context":108},226,{"file":62,"line":114,"context":108},274,[],[117,140,150,165],{"entryPoint":118,"graph":119,"unsanitizedCount":30,"severity":139},"check_paydart_response (class.paydart.php:438)",{"nodes":120,"edges":136},[121,126,130],{"id":122,"type":123,"label":124,"file":42,"line":125},"n0","source","$_GET",476,{"id":127,"type":128,"label":129,"file":42,"line":125},"n1","transform","→ saveTxnResponse()",{"id":131,"type":132,"label":133,"file":62,"line":134,"wp_function":135},"n2","sink","query() [SQLi]",295,"query",[137,138],{"from":122,"to":127,"sanitized":91},{"from":127,"to":131,"sanitized":91},"high",{"entryPoint":141,"graph":142,"unsanitizedCount":30,"severity":139},"\u003Cclass.paydart> (class.paydart.php:0)",{"nodes":143,"edges":147},[144,145,146],{"id":122,"type":123,"label":124,"file":42,"line":125},{"id":127,"type":128,"label":129,"file":42,"line":125},{"id":131,"type":132,"label":133,"file":62,"line":134,"wp_function":135},[148,149],{"from":122,"to":127,"sanitized":91},{"from":127,"to":131,"sanitized":91},{"entryPoint":151,"graph":152,"unsanitizedCount":30,"severity":139},"add_paydart_block (woo-paydart.php:83)",{"nodes":153,"edges":162},[154,156,158],{"id":122,"type":123,"label":124,"file":62,"line":155},91,{"id":127,"type":128,"label":157,"file":62,"line":155},"→ getPaydartOrderData()",{"id":131,"type":132,"label":159,"file":62,"line":160,"wp_function":161},"get_row() [SQLi]",193,"get_row",[163,164],{"from":122,"to":127,"sanitized":91},{"from":127,"to":131,"sanitized":91},{"entryPoint":166,"graph":167,"unsanitizedCount":30,"severity":139},"\u003Cwoo-paydart> (woo-paydart.php:0)",{"nodes":168,"edges":180},[169,171,175,176,178],{"id":122,"type":123,"label":124,"file":62,"line":170},87,{"id":127,"type":132,"label":172,"file":62,"line":173,"wp_function":174},"echo() [XSS]",187,"echo",{"id":131,"type":123,"label":124,"file":62,"line":155},{"id":177,"type":128,"label":157,"file":62,"line":155},"n3",{"id":179,"type":132,"label":159,"file":62,"line":160,"wp_function":161},"n4",[181,182,183],{"from":122,"to":127,"sanitized":92},{"from":131,"to":177,"sanitized":91},{"from":177,"to":179,"sanitized":91},{"summary":185,"deductions":186},"The 'paydart' v1.0.0 plugin demonstrates a generally positive security posture with several good practices. Notably, all SQL queries utilize prepared statements, and the vast majority of output is properly escaped, significantly mitigating common web vulnerabilities like SQL injection and Cross-Site Scripting (XSS). The absence of shortcodes, cron events, and REST API routes limits the overall attack surface, and the single AJAX handler is protected by a nonce check.\n\nHowever, the taint analysis reveals four high-severity flows with unsanitized paths. While the static analysis doesn't explicitly detail the nature of these paths or their data sources, four high-severity flows are a significant concern, even if they haven't yet led to publicly disclosed vulnerabilities. The lack of capability checks on the AJAX handler, despite the presence of a nonce check, also represents a potential oversight in access control. The plugin's clean vulnerability history is a positive indicator, suggesting the developers have been diligent or perhaps the plugin hasn't been a target, but it doesn't negate the risks identified in the code analysis.\n\nIn conclusion, 'paydart' v1.0.0 has strengths in its handling of SQL and output escaping. The primary weaknesses lie in the high-severity unsanitized taint flows and the missing capability check on the AJAX endpoint. Addressing these identified code-level risks is crucial for improving the plugin's overall security resilience, especially given the limited public vulnerability history which offers little insight into potential past issues.",[187,190],{"reason":188,"points":189},"High severity taint flows found",20,{"reason":191,"points":100},"Missing capability checks on AJAX handler","2026-04-16T14:40:58.082Z",{"wat":194,"direct":203},{"assetPaths":195,"generatorPatterns":198,"scriptPaths":199,"versionParams":200},[196,197],"\u002Fwp-content\u002Fplugins\u002Fpaydart\u002Fassets\u002F1.0.0\u002Fcss\u002Fpaydart.css","\u002Fwp-content\u002Fplugins\u002Fpaydart\u002Fassets\u002F1.0.0\u002Fjs\u002Fpaydart.js",[],[197],[201,202],"paydart.css?ver=","paydart.js?ver=",{"cssClasses":204,"htmlComments":207,"htmlAttributes":208,"restEndpoints":211,"jsGlobals":212,"shortcodeOutput":213},[205,206],"paydart_block","paydart-img-loader",[],[209,210],"id=\"paydart_table\"","id=\"paydart_area\"",[],[],[],{"error":92,"url":215,"statusCode":216,"statusMessage":217,"message":217},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fpaydart\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":11,"versions":219},[]]