Payex Payment Gateway for Woocommerce Security & Risk Analysis

wordpress.org/plugins/payex-payment-gateway-for-woocommerce

With Payex, you can now accept payments from Malaysia & oversea customers via FPX, Cards (Visa/MC/UnionPay), EWallets, Instalments and Subscriptio …

300 active installs v1.2.10 PHP 7.0+ WP 4.7+ Updated Feb 10, 2025
fpxonline-bankingpayexpaymentpayment-gateway
92
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Payex Payment Gateway for Woocommerce Safe to Use in 2026?

Generally Safe

Score 92/100

Payex Payment Gateway for Woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1yr ago
Risk Assessment

The "payex-payment-gateway-for-woocommerce" plugin v1.2.10 exhibits a generally strong security posture based on the provided static analysis. The absence of direct entry points like AJAX handlers, REST API routes, and shortcodes significantly limits the attack surface. Furthermore, the code demonstrates good practices with 100% of SQL queries using prepared statements and a high percentage of output being properly escaped. The lack of dangerous functions, file operations, and any recorded vulnerability history is also a positive indicator.

Key Concerns

  • No nonce checks implemented
  • No capability checks implemented
  • One unsanitized taint flow detected
  • External HTTP requests made
Vulnerabilities
None known

Payex Payment Gateway for Woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Payex Payment Gateway for Woocommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
1
12 escaped
Nonce Checks
0
Capability Checks
0
File Operations
0
External Requests
7
Bundled Libraries
0

Output Escaping

92% escaped13 total outputs
Data Flows
1 unsanitized

Data Flow Analysis

1 flows1 with unsanitized paths
<class-wc-payex-gateway> (includes\class-wc-payex-gateway.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Payex Payment Gateway for Woocommerce Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 11
actionplugins_loadedclass-wc-payex-gateway.php:48
filterwoocommerce_payment_gatewaysclass-wc-payex-gateway.php:51
actionwoocommerce_blocks_loadedclass-wc-payex-gateway.php:54
actionwoocommerce_query_payex_payment_statusclass-wc-payex-gateway.php:57
actionwoocommerce_blocks_payment_method_type_registrationclass-wc-payex-gateway.php:104
actionwoocommerce_api_wc_payex_gatewayincludes\class-wc-payex-gateway.php:77
actionwoocommerce_scheduled_subscription_paymentincludes\class-wc-payex-gateway.php:80
actionwcs_resubscribe_order_createdincludes\class-wc-payex-gateway.php:83
actionwcs_renewal_order_createdincludes\class-wc-payex-gateway.php:84
actionwoocommerce_query_payex_payment_statusincludes\class-wc-payex-gateway.php:87
filterwoocommerce_cart_needs_paymentincludes\class-wc-payex-gateway.php:90

Scheduled Events 3

woocommerce_query_payex_payment_status
woocommerce_query_payex_payment_status
woocommerce_query_payex_payment_status
Maintenance & Trust

Payex Payment Gateway for Woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested
Last updatedFeb 10, 2025
PHP min version7.0
Downloads8K

Community Trust

Rating60/100
Number of ratings2
Active installs300
Developer Profile

Payex Payment Gateway for Woocommerce Developer Profile

payexplt

1 plugin · 300 total installs

88
trust score
Avg Security Score
92/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Payex Payment Gateway for Woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/payex-payment-gateway-for-woocommerce/assets/css/main.css/wp-content/plugins/payex-payment-gateway-for-woocommerce/assets/js/main.js
Version Parameters
payex-payment-gateway-for-woocommerce/assets/css/main.css?ver=payex-payment-gateway-for-woocommerce/assets/js/main.js?ver=

HTML / DOM Fingerprints

CSS Classes
payex-payment-gateway-for-woocommerce
Data Attributes
data-payex-payment-gateway
JS Globals
payex_gateway_params
REST Endpoints
/wp-json/payex/v1/order/wp-json/payex/v1/webhook
FAQ

Frequently Asked Questions about Payex Payment Gateway for Woocommerce