Paystack MemberPress Security & Risk Analysis

wordpress.org/plugins/paystack-memberpress

A Memberpress Payment Gateway integration with Paystack for membership subscriptions.

400 active installs v1.3.7 PHP + WP 5.1+ Updated Oct 12, 2025
billingmemberpresspaymentpaystacksubscription
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Paystack MemberPress Safe to Use in 2026?

Generally Safe

Score 100/100

Paystack MemberPress has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago
Risk Assessment

The paystack-memberpress plugin v1.3.7 exhibits a generally good security posture based on the provided static analysis. The complete absence of known CVEs and common vulnerability types in its history suggests a history of responsible development and patching. The code analysis reveals a low attack surface with no identified unprotected entry points. The use of prepared statements for all SQL queries is a strong indication of secure database interaction, and the plugin doesn't appear to perform file operations or external HTTP requests in a way that would immediately raise concerns. The lack of identified dangerous functions further contributes to a positive assessment.

Key Concerns

  • Low percentage of properly escaped output
  • No nonce checks implemented
  • No capability checks implemented
Vulnerabilities
None known

Paystack MemberPress Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Paystack MemberPress Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
4 prepared
Unescaped Output
27
7 escaped
Nonce Checks
0
Capability Checks
0
File Operations
1
External Requests
1
Bundled Libraries
0

SQL Query Safety

100% prepared4 total queries

Output Escaping

21% escaped34 total outputs
Data Flows
All sanitized

Data Flow Analysis

1 flows
<MeprPaystackGateway> (MeprPaystackGateway.php:0)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Paystack MemberPress Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 2
filtermepr-gateway-pathsMpPaystack.php:13
actionmepr-options-admin-enqueue-scriptMpPaystack.php:16
Maintenance & Trust

Paystack MemberPress Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedOct 12, 2025
PHP min version
Downloads12K

Community Trust

Rating100/100
Number of ratings1
Active installs400
Developer Profile

Paystack MemberPress Developer Profile

paystack

5 plugins · 2K total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Paystack MemberPress

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/paystack-memberpress/css/memberpress-paystack.css/wp-content/plugins/paystack-memberpress/js/memberpress-paystack.js/wp-content/plugins/paystack-memberpress/images/paystack.png/wp-content/plugins/paystack-memberpress/images/cards.png
Script Paths
/wp-content/plugins/paystack-memberpress/js/memberpress-paystack.js
Version Parameters
paystack-memberpress/css/memberpress-paystack.css?ver=paystack-memberpress/js/memberpress-paystack.js?ver=

HTML / DOM Fingerprints

CSS Classes
mepr-paystack-gateway-settings
HTML Comments
<!-- MeprPaystackAPI Class --><!-- MeprPaystackGateway Class -->
Data Attributes
data-gateway-id="MeprPaystackGateway"id="mepr_paystack_plan_id"name="mepr_paystack_plan_id"
JS Globals
MP_PAYSTACK_PLUGIN_SLUGMP_PAYSTACK_PLUGIN_NAMEMP_PAYSTACK_EDITIONMP_PAYSTACK_PATHMP_PAYSTACK_URLMP_PAYSTACK_JS_URL+1 more
FAQ

Frequently Asked Questions about Paystack MemberPress