Give – Paystack Gateway Security & Risk Analysis

wordpress.org/plugins/paystack-for-give

Fundraise with Paystack and GiveWP.

1K active installs v3.0.0 PHP 7.4+ WP 6.6+ Updated Oct 1, 2025
donationdonation-plugindonationsgivewppaystack
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Give – Paystack Gateway Safe to Use in 2026?

Generally Safe

Score 100/100

Give – Paystack Gateway has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 6mo ago
Risk Assessment

The "paystack-for-give" v3.0.0 plugin exhibits a generally strong security posture based on the provided static analysis. The complete absence of entry points like AJAX handlers, REST API routes, shortcodes, and cron events, particularly those lacking authentication, significantly reduces its attack surface. Furthermore, the use of prepared statements for all SQL queries and a good percentage of properly escaped output are positive indicators of secure coding practices. The plugin also shows no history of known vulnerabilities, which is encouraging.

Key Concerns

  • No nonce checks implemented
  • No capability checks implemented
  • Unescaped output detected
  • File operations present without specific context
  • External HTTP requests present without specific context
Vulnerabilities
None known

Give – Paystack Gateway Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Give – Paystack Gateway Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
10 escaped
Nonce Checks
0
Capability Checks
0
File Operations
1
External Requests
3
Bundled Libraries
0

Output Escaping

77% escaped13 total outputs
Attack Surface

Give – Paystack Gateway Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 8
actionbefore_give_initgive-paystack-gateway.php:49
actionadmin_initgive-paystack-gateway.php:62
actionadmin_noticessrc\Addon\Environment.php:23
actionadmin_noticessrc\Addon\Environment.php:29
actiongivewp_register_payment_gatewaysrc\Paystack\ServiceProvider.php:31
filtergive_get_sections_gatewayssrc\Settings\PaystackSettings.php:22
filtergive_get_settings_gatewayssrc\Settings\PaystackSettings.php:23
actiongive_admin_field_paystack_webhookssrc\Settings\PaystackSettings.php:24
Maintenance & Trust

Give – Paystack Gateway Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedOct 1, 2025
PHP min version7.4
Downloads29K

Community Trust

Rating94/100
Number of ratings3
Active installs1K
Developer Profile

Give – Paystack Gateway Developer Profile

paystack

5 plugins · 2K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Give – Paystack Gateway

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/paystack-for-give/src/Paystack/Gateway/resources/images/logo.png

HTML / DOM Fingerprints

Data Attributes
data-paystack-public-keydata-paystack-amountdata-paystack-emaildata-paystack-refdata-paystack-currencydata-paystack-callback+5 more
JS Globals
GivePaystack
REST Endpoints
/wp-json/give-paystack/v1/transaction-initialize/wp-json/give-paystack/v1/webhook
Shortcode Output
[paystack_donation_form]
FAQ

Frequently Asked Questions about Give – Paystack Gateway