[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fVaD_fHJeNkxFQrxq0522yNne7sw6gV3ZLID06fO_79Y":3},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":13,"last_updated":14,"tested_up_to":15,"requires_at_least":16,"requires_php":17,"tags":18,"homepage":24,"download_link":25,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28,"vulnerabilities":29,"developer":30,"crawl_stats":27,"alternatives":35,"analysis":140,"fingerprints":252},"salmanpatnee-mpgs-for-woocommerce","Payment Gateway with MPGS for WooCommerce","2.0.0","salmanpatnee","https:\u002F\u002Fprofiles.wordpress.org\u002Fsalmanpatnee\u002F","\u003Cp>Accept credit and debit card payments on your WooCommerce store using MasterCard Payment Gateway Services (MPGS) Hosted Checkout.\u003C\u002Fp>\n\u003Cp>All card data is handled by MPGS servers directly. No sensitive payment information touches your server, keeping you PCI compliant.\u003C\u002Fp>\n\u003Ch4>Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Test Mode\u003C\u002Fstrong> – Switch between test and live credentials safely\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Debug Logging\u003C\u002Fstrong> – Built-in WooCommerce logger for troubleshooting\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Transaction Details\u003C\u002Fstrong> – Saves transaction ID, receipt, card type, and last 4 digits with each order\u003C\u002Fli>\n\u003Cli>\u003Cstrong>HPOS Compatible\u003C\u002Fstrong> – Works with WooCommerce High-Performance Order Storage\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Multiple API Versions\u003C\u002Fstrong> – Supports MPGS API versions 49, 52, 55, 62, 63, and 66\u003C\u002Fli>\n\u003Cli>\u003Cstrong>3DS Authentication\u003C\u002Fstrong> – Supports both 3DS1 and 3DS2\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Translation Ready\u003C\u002Fstrong> – French translation included\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Checkout Modes\u003C\u002Fh4>\n\u003Col>\n\u003Cli>\u003Cstrong>Payment Page\u003C\u002Fstrong> – Customer is redirected to the MPGS payment page (all API versions)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Lightbox\u003C\u002Fstrong> – Payment form opens as a popup on your site (API v49-62 only)\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch4>Credits\u003C\u002Fh4>\n\u003Cp>Maintained by Salman Patnee. Originally created by Ali Basheer (v1.0.0-1.5.1).\u003C\u002Fp>\n\u003Ch3>External Services\u003C\u002Fh3>\n\u003Cp>This plugin connects to \u003Cstrong>MasterCard Payment Gateway Services (MPGS)\u003C\u002Fstrong> to process payments.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>\u003Cstrong>Provider:\u003C\u002Fstrong> MasterCard International Incorporated – \u003Ca href=\"https:\u002F\u002Fwww.mastercard.com\u002F\" rel=\"nofollow ugc\">mastercard.com\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Terms of Use:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.mastercard.com\u002Fglobal\u002Fen\u002Fvision\u002Fterms-of-use.html\" rel=\"nofollow ugc\">mastercard.com\u002Fterms-of-use\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Privacy Policy:\u003C\u002Fstrong> \u003Ca href=\"https:\u002F\u002Fwww.mastercard.com\u002Fglobal\u002Fen\u002Fvision\u002Fcorp-responsibility\u002Fcommitment-to-privacy.html\" rel=\"nofollow ugc\">mastercard.com\u002Fprivacy\u003C\u002Fa>\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>When and what data is sent\u003C\u002Fh4>\n\u003Cp>The plugin calls MPGS servers twice per transaction:\u003C\u002Fp>\n\u003Col>\n\u003Cli>\u003Cstrong>At checkout\u003C\u002Fstrong> – Creates a payment session with order amount, currency, description, customer name\u002Femail, and return URL.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>After payment\u003C\u002Fstrong> – Verifies the transaction result using the order ID.\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>Merchant credentials are sent server-side only and never exposed to the browser. Card numbers, CVV, and expiry dates are \u003Cstrong>never\u003C\u002Fstrong> sent through this plugin – customers enter these directly on MPGS-hosted pages.\u003C\u002Fp>\n\u003Ch4>Gateway domains\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Ccode>https:\u002F\u002Fap-gateway.mastercard.com\u002F\u003C\u002Fcode> – Asia Pacific\u003C\u002Fli>\n\u003Cli>\u003Ccode>https:\u002F\u002Feu-gateway.mastercard.com\u002F\u003C\u002Fcode> – Europe\u003C\u002Fli>\n\u003Cli>\u003Ccode>https:\u002F\u002Fna-gateway.mastercard.com\u002F\u003C\u002Fcode> – North America\u003C\u002Fli>\n\u003Cli>\u003Ccode>https:\u002F\u002Fmtf.gateway.mastercard.com\u002F\u003C\u002Fcode> – Test\u002FSandbox\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Your bank will tell you which domain to use.\u003C\u002Fp>\n\u003Ch4>Privacy\u003C\u002Fh4>\n\u003Cp>This plugin does not track users, store card data, use tracking cookies, or share data with anyone other than MPGS for payment processing.\u003C\u002Fp>\n","Accept credit and debit card payments through MasterCard Payment Gateway Services (MPGS). Secure hosted checkout with 3DS authentication.",20,197,0,"2026-02-11T18:31:00.000Z","6.9.4","5.0","7.2",[19,20,21,22,23],"credit-card","mastercard","mpgs","payment-gateway","woocommerce","https:\u002F\u002Fwordpress.org\u002Fplugins\u002Fsalmanpatnee-mpgs-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsalmanpatnee-mpgs-for-woocommerce.2.0.0.zip",100,null,"2026-03-15T15:16:48.613Z",[],{"slug":7,"display_name":7,"profile_url":8,"plugin_count":31,"total_installs":11,"avg_security_score":26,"avg_patch_time_days":32,"trust_score":33,"computed_at":34},1,30,94,"2026-04-04T06:11:00.683Z",[36,57,78,100,120],{"slug":37,"name":38,"version":39,"author":40,"author_profile":41,"description":42,"short_description":43,"active_installs":44,"downloaded":45,"rating":46,"num_ratings":47,"last_updated":48,"tested_up_to":49,"requires_at_least":50,"requires_php":51,"tags":52,"homepage":55,"download_link":56,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"woo-paystack","Paystack WooCommerce Payment Gateway","5.8.2","Tunbosun Ayinla","https:\u002F\u002Fprofiles.wordpress.org\u002Ftubiz\u002F","\u003Cp>Paystack makes it easy for businesses in Nigeria, Ghana, Kenya and South Africa to accept secure payments from multiple local and global payment channels. Integrate Paystack with your store today, and let your customers pay you with their choice of methods.\u003C\u002Fp>\n\u003Cp>With Paystack for WooCommerce, you can accept payments via:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Credit\u002FDebit Cards — Visa, Mastercard, Verve (NG, GH, KE), American Express (SA only)\u003C\u002Fli>\n\u003Cli>Bank transfer (Nigeria)\u003C\u002Fli>\n\u003Cli>Mobile money (Ghana)\u003C\u002Fli>\n\u003Cli>Masterpass (South Africa)\u003C\u002Fli>\n\u003Cli>EFT (South Africa)\u003C\u002Fli>\n\u003Cli>USSD (Nigeria)\u003C\u002Fli>\n\u003Cli>Visa QR (Nigeria)\u003C\u002Fli>\n\u003Cli>Many more coming soon\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Why Paystack?\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Start receiving payments instantly—go from sign-up to your first real transaction in as little as 15 minutes\u003C\u002Fli>\n\u003Cli>Simple, transparent pricing—no hidden charges or fees\u003C\u002Fli>\n\u003Cli>Modern, seamless payment experience via the Paystack Checkout — \u003Ca href=\"https:\u002F\u002Fpaystack.com\u002Fdemo\u002Fcheckout\" rel=\"nofollow ugc\">Try the demo!\u003C\u002Fa>\u003C\u002Fli>\n\u003Cli>Advanced fraud detection\u003C\u002Fli>\n\u003Cli>Understand your customers better through a simple and elegant dashboard\u003C\u002Fli>\n\u003Cli>Access to attentive, empathetic customer support 24\u002F7\u003C\u002Fli>\n\u003Cli>Free updates as we launch new features and payment options\u003C\u002Fli>\n\u003Cli>Clearly documented APIs to build your custom payment experiences\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Over 60,000 businesses of all sizes in Nigeria, Ghana, Kenya, and South Africa rely on Paystack’s suite of products to receive payments and make payouts seamlessly. Sign up on \u003Ca href=\"https:\u002F\u002Fpaystack.com\u002Fsignup\" rel=\"nofollow ugc\">Paystack.com\u002Fsignup\u003C\u002Fa> to get started.\u003C\u002Fp>\n\u003Ch4>Note\u003C\u002Fh4>\n\u003Cp>This plugin is meant to be used by merchants in Ghana, Kenya, Nigeria and South Africa.\u003C\u002Fp>\n\u003Ch4>Plugin Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\u003Cstrong>Accept payment\u003C\u002Fstrong> via Mastercard, Visa, Verve, USSD, Mobile Money, Bank Transfer, EFT, Bank Accounts, GTB 737 & Visa QR.\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Seamless integration\u003C\u002Fstrong> into the WooCommerce checkout page. Accept payment directly on your site\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Refunds\u003C\u002Fstrong> from the WooCommerce order details page. Refund an order directly from the order details page\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Recurring payment\u003C\u002Fstrong> using \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> plugin\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WooCommerce Subscriptions Integration\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>\n\u003Cp>The \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> integration only works with \u003Cstrong>WooCommerce v2.6 and above\u003C\u002Fstrong> and \u003Cstrong>WooCommerce Subscriptions v2.0 and above\u003C\u002Fstrong>.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>No subscription plans is created on Paystack. The \u003Ca href=\"https:\u002F\u002Fwoocommerce.com\u002Fproducts\u002Fwoocommerce-subscriptions\u002F\" rel=\"nofollow ugc\">WooCommerce Subscriptions\u003C\u002Fa> plugin handles all the subscription functionality.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If a customer pays for a subscription using a Mastercard or Visa card, their subscription will renew automatically throughout the duration of the subscription. If an automatic renewal fail their subscription will be put on-hold and they will have to login to their account to renew the subscription.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>For customers paying with a Verve card, their subscription can’t be renewed automatically, once a payment is due their subscription will be on-hold. The customer will have to login to his account to manually renew his subscription.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>If a subscription has a free trial and no signup-fee, automatic renewal is not possible for the first payment because the initial order total will be 0, after the free trial the subscription will be put on-hold. The customer will have to login to his account to renew his subscription. If a Mastercard or Visa card is used to renew the subscription subsequent renewals will be automatic throughout the duration of the subscription, if a Verve card is used automatic renewal isn’t possible.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Suggestions \u002F Feature Request\u003C\u002Fh4>\n\u003Cp>If you have suggestions or a new feature request, feel free to get in touch with me via the contact form on my website \u003Ca href=\"http:\u002F\u002Fbosun.me\u002Fget-in-touch\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>\u003C\u002Fp>\n\u003Cp>You can also follow me on Twitter! \u003Cstrong>\u003Ca href=\"https:\u002F\u002Ftwitter.com\u002Ftubiz\" rel=\"nofollow ugc\">@tubiz\u003C\u002Fa>\u003C\u002Fstrong>\u003C\u002Fp>\n","Paystack for WooCommerce allows your WooCommerce store to accept secure payments from multiple local and global payment channels.",30000,432109,90,24,"2025-04-17T08:26:00.000Z","6.8.5","6.2","7.4",[20,22,53,54,23],"paystack","visa","https:\u002F\u002Fpaystack.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-paystack.5.8.2.zip",{"slug":58,"name":59,"version":60,"author":61,"author_profile":62,"description":63,"short_description":64,"active_installs":65,"downloaded":66,"rating":67,"num_ratings":68,"last_updated":69,"tested_up_to":70,"requires_at_least":71,"requires_php":72,"tags":73,"homepage":76,"download_link":77,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"woo-asaas","Asaas Gateway for WooCommerce","2.7.4","Asaas","https:\u002F\u002Fprofiles.wordpress.org\u002Fasaas\u002F","\u003Cp>Use \u003Ca href=\"https:\u002F\u002Fwww.asaas.com\" rel=\"nofollow ugc\">Asaas\u003C\u002Fa> as payment method in your WooCommerce store.\u003C\u002Fp>\n\u003Cp>This plugin is an implementation of \u003Ca href=\"https:\u002F\u002Fasaasv3.docs.apiary.io\" rel=\"nofollow ugc\">Asaas API v3\u003C\u002Fa>. The checkout mechanism is completely transparent. The customer will not go out of your store to finish the order. The data are sent to Asaas service, that process the payment and return its status.\u003C\u002Fp>\n\u003Cp>For any doubt about the plugin installation and integration, please read the FAQ. If it doesn’t solve, use the plugin Support area that we will help you as soon as possible.\u003C\u002Fp>\n","Take transparent credit card and bank ticket payment checkouts on your store using Asaas.",9000,177841,78,17,"2026-03-10T00:36:00.000Z","6.7.5","4.4","7.0",[74,19,75,22,23],"asaas","payment","https:\u002F\u002Fwww.asaas.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwoo-asaas.2.7.4.zip",{"slug":79,"name":80,"version":81,"author":82,"author_profile":83,"description":84,"short_description":85,"active_installs":86,"downloaded":87,"rating":88,"num_ratings":89,"last_updated":90,"tested_up_to":15,"requires_at_least":91,"requires_php":72,"tags":92,"homepage":95,"download_link":96,"security_score":97,"vuln_count":98,"unpatched_count":13,"last_vuln_date":99,"fetched_at":28},"gestpay-for-woocommerce","Gestpay for WooCommerce","20251211","Fabrick Support","https:\u002F\u002Fprofiles.wordpress.org\u002Feasynolo\u002F","\u003Cp>Axerve Free Plugin for Woocommerce allows you to use \u003Ca href=\"https:\u002F\u002Fwww.axerve.com\u002F\" title=\"Axerve Website\" rel=\"nofollow ugc\">Axerve\u003C\u002Fa> on your WooCommerce-powered website.\u003C\u002Fp>\n\u003Cp>There are four operational modes in this plugin, which depends on Axerve version you are using:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Axerve Starter\u003C\u002Fli>\n\u003Cli>Axerve Professional\u003C\u002Fli>\n\u003Cli>Axerve Professional On Site\u003C\u002Fli>\n\u003Cli>Axerve Professional iFrame\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fdocs.axerve.com\u002Fit\u002Fplugin\u002Fwoocommerce\u002F\" title=\"Axerve for WooCommerce - Usage Documentation\" rel=\"nofollow ugc\">Click here to read the full usage documentation on Axerve\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>WooCommerce Blocks Compatibility\u003C\u002Fh4>\n\u003Cp>Starting from version 20251028, the plugin is fully compatible with WooCommerce Blocks checkout. All payment methods are now supported in both classic checkout and blocks checkout modes. There is no need to disable WooCommerce Blocks checkout.\u003C\u002Fp>\n\u003Ch4>Available Features\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>S2S SOAP (Except callReadTrxS2S and callVerifyCardS2S)\u003C\u002Fli>\n\u003Cli>Tokenization\u003C\u002Fli>\n\u003Cli>3DS1\u003C\u002Fli>\n\u003Cli>3DS2 – Authentication\u003C\u002Fli>\n\u003Cli>3DS2 – Recurring Transactions\u003C\u002Fli>\n\u003Cli>RBA (Risk-Based Authentication)\u003C\u002Fli>\n\u003Cli>PayPal Seller Protection\u003C\u002Fli>\n\u003Cli>WooCommerce Subscriptions support (Recurring payments and subscriptions)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Available Payment Methods\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>Credit Cards\u003C\u002Fli>\n\u003Cli>BANCOMAT Pay\u003C\u002Fli>\n\u003Cli>MyBank\u003C\u002Fli>\n\u003Cli>PayPal\u003C\u002Fli>\n\u003Cli>PayPal Billing Agreement\u003C\u002Fli>\n\u003Cli>PayPal Buy Now Pay Later\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Actions and filters list\u003C\u002Fh3>\n\u003Cp>Here is a list of filters and actions used in this plugin:\u003C\u002Fp>\n\u003Ch4>Actions\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>gestpay_before_processing_order\u003C\u002Fli>\n\u003Cli>gestpay_after_order_completed\u003C\u002Fli>\n\u003Cli>gestpay_after_order_failed\u003C\u002Fli>\n\u003Cli>gestpay_after_order_pending\u003C\u002Fli>\n\u003Cli>gestpay_before_order_settle\u003C\u002Fli>\n\u003Cli>gestpay_order_settle_success\u003C\u002Fli>\n\u003Cli>gestpay_order_settle_fail\u003C\u002Fli>\n\u003Cli>gestpay_before_order_refund\u003C\u002Fli>\n\u003Cli>gestpay_order_refund_success\u003C\u002Fli>\n\u003Cli>gestpay_order_refund_fail\u003C\u002Fli>\n\u003Cli>gestpay_before_order_delete\u003C\u002Fli>\n\u003Cli>gestpay_order_delete_success\u003C\u002Fli>\n\u003Cli>gestpay_order_delete_fail\u003C\u002Fli>\n\u003Cli>gestpay_after_s2s_order_failed\u003C\u002Fli>\n\u003Cli>gestpay_on_renewal_payment_failure\u003C\u002Fli>\n\u003Cli>gestpay_my_cards_template_before_table\u003C\u002Fli>\n\u003Cli>gestpay_my_cards_template_after_table\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Filters\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>gestpay_gateway_parameters\u003C\u002Fli>\n\u003Cli>gestpay_encrypt_parameters\u003C\u002Fli>\n\u003Cli>gestpay_settings_tab\u003C\u002Fli>\n\u003Cli>gestpay_my_cards_template\u003C\u002Fli>\n\u003Cli>gestpay_cvv_fancybox\u003C\u002Fli>\n\u003Cli>gestpay_gateway_cards_images\u003C\u002Fli>\n\u003Cli>gestpay_alter_order_id -> this can be used to add, for example, a prefix to the order ID\u003C\u002Fli>\n\u003Cli>gestpay_revert_order_id -> this must be used to revert back the order ID changed with the \u003Ccode>gestpay_alter_order_id\u003C\u002Fcode> filter\u003C\u002Fli>\n\u003Cli>gestpay_s2s_validate_payment_fields\u003C\u002Fli>\n\u003Cli>gestpay_s2s_payment_fields_error_strings\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Third Party Libraries\u003C\u002Fh3>\n\u003Cp>Questo plugin utilizza le seguenti librerie di terze parti:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>SOAP Client – Parte della libreria standard PHP, utilizzata per le comunicazioni con l’API Gestpay\u003C\u002Fli>\n\u003Cli>WooCommerce – Framework e-commerce per WordPress (GPLv3)\u003C\u002Fli>\n\u003Cli>WordPress – CMS principale (GPLv2 o successiva)\u003C\u002Fli>\n\u003Cli>jQuery – Libreria JavaScript per la manipolazione del DOM e la gestione degli eventi (MIT License)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>External services\u003C\u002Fh3>\n\u003Cp>Questo plugin si connette ai seguenti servizi esterni:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Axerve Payment Gateway (precedentemente Gestpay)\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>– Scopo: Elaborazione dei pagamenti tramite il gateway di Banca Sella\u003Cbr \u002F>\n– Dati inviati: Informazioni sull’ordine, dati del cliente necessari per il pagamento\u003Cbr \u002F>\n– Quando: Durante il processo di pagamento e per le operazioni di gestione degli ordini\u003Cbr \u002F>\n– Privacy Policy: https:\u002F\u002Fwww.axerve.com\u002Fprivacy-policy\u003Cbr \u002F>\n– Termini di servizio: https:\u002F\u002Fwww.axerve.com\u002Fterms-conditions\u003C\u002Fp>\n\u003Col>\n\u003Cli>icanhazip.com\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>– Scopo: Identificazione dell’indirizzo IP del server per la configurazione del gateway di pagamento\u003Cbr \u002F>\n– Dati inviati: Nessun dato viene inviato, il servizio risponde solo con l’indirizzo IP pubblico\u003Cbr \u002F>\n– Quando: Solo nell’area amministrativa durante la configurazione del plugin\u003Cbr \u002F>\n– Privacy Policy: https:\u002F\u002Fmajor.io\u002Ficanhazip-com-faq\u002F\u003Cbr \u002F>\n– Note: Questo servizio viene utilizzato solo per aiutare gli amministratori a configurare correttamente il gateway di pagamento nel backoffice di Axerve\u003C\u002Fp>\n\u003Col>\n\u003Cli>Script JavaScript di verifica\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>– Scopo: Verifica della compatibilità del browser con il gateway di pagamento\u003Cbr \u002F>\n– Dati inviati: Informazioni sul browser dell’utente per verificare la compatibilità TLS\u003Cbr \u002F>\n– Quando: Durante il processo di pagamento\u003Cbr \u002F>\n– Domini: gestpay.net, gestpay.it, ecomm.sella.it\u003Cbr \u002F>\n– Privacy Policy: https:\u002F\u002Fwww.axerve.com\u002Fprivacy-policy\u003C\u002Fp>\n\u003Col>\n\u003Cli>MyBank\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Cp>– Scopo: Integrazione con il sistema di pagamento MyBank\u003Cbr \u002F>\n– Dati inviati: Informazioni necessarie per il pagamento tramite MyBank\u003Cbr \u002F>\n– Quando: Solo quando l’utente sceglie MyBank come metodo di pagamento\u003Cbr \u002F>\n– Privacy Policy: https:\u002F\u002Fwww.mybank.eu\u002Fprivacy-policy\u002F\u003Cbr \u002F>\n– Termini di servizio: https:\u002F\u002Fwww.mybank.eu\u002Fterms-and-conditions\u002F\u003C\u002Fp>\n\u003Cp>Server di test e sviluppo\u003Cbr \u002F>\nNel codice di esempio (directory \u003Ccode>sample\u002F\u003C\u002Fcode>) sono presenti riferimenti a domini fittizi (\u003Ccode>site1.it\u003C\u002Fcode> e \u003Ccode>site2.it\u003C\u002Fcode>) utilizzati solo come esempio per dimostrare la configurazione multi-sito. Questi domini sono puramente dimostrativi e non sono utilizzati nel codice di produzione.\u003C\u002Fp>\n","Axerve Free Plugin for Woocommerce extends WooCommerce providing the payment gateway Axerve.",1000,43366,76,9,"2025-12-11T15:15:00.000Z","4.7",[93,19,94,22,23],"axerve","gestpay","http:\u002F\u002Fwordpress.org\u002Fplugins\u002Fgestpay-for-woocommerce\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fgestpay-for-woocommerce.20251211.zip",99,3,"2024-02-27 00:00:00",{"slug":101,"name":102,"version":103,"author":104,"author_profile":105,"description":106,"short_description":107,"active_installs":86,"downloaded":108,"rating":13,"num_ratings":13,"last_updated":109,"tested_up_to":15,"requires_at_least":50,"requires_php":51,"tags":110,"homepage":116,"download_link":117,"security_score":118,"vuln_count":98,"unpatched_count":13,"last_vuln_date":119,"fetched_at":28},"payplus-payment-gateway","PayPlus Payment Gateway","8.1.5","PayPlus Tech Team","https:\u002F\u002Fprofiles.wordpress.org\u002Fpayplus\u002F","\u003Cp>PayPlus Payment Gateway for WooCommerce\u003Cbr \u002F>\nAccept debit and credit cards on your WooCommerce store in a secure way with the ability to design your own payment page and add high functionalities to it. SSL is not required.\u003C\u002Fp>\n\u003Cp>\u003Cstrong>Supported PHP Versions:\u003C\u002Fstrong>\u003Cbr \u002F>\nThis plugin is compatible with PHP versions from 7.4 up to 8.3.\u003C\u002Fp>\n\u003Cp>Before installation:\u003Cbr \u002F>\nYou need your account credentials. For that, you have to contact PayPlus and to join the service.\u003C\u002Fp>\n\u003Cp>Plugin Disclaimer:\u003Cbr \u002F>\nPayPlus does not accept liability for any damage, loss, cost (including legal costs), expenses, indirect losses or consequential damage of any kind which may be suffered or incurred by the user from the use of this service.\u003C\u002Fp>\n\u003Cp>It is important to know that this plugin relies on third-party services.\u003Cbr \u002F>\nHowever, the third-party so mentioned is the PayPlus core engine at their servers – the providers of this plugin.\u003C\u002Fp>\n\u003Cp>By being a payment processor, just like many of its kind, it must send some transaction details to the third-party server (itself) for token generation and transaction logging statistics and connecting to invoices.\u003C\u002Fp>\n\u003Cp>It is this transfer back and forth of data between your WooCommerce and the PayPlus servers that we would like to bring to your attention clearly and plainly.\u003C\u002Fp>\n\u003Cp>The main links to PayPlus, its terms and conditions, and privacy policy are as listed:\u003Cbr \u002F>\n– Home Page: https:\u002F\u002Fwww.payplus.co.il\u003Cbr \u002F>\n– Plugin Instruction page: https:\u002F\u002Fwww.payplus.co.il\u002Fwordpress\u003Cbr \u002F>\n– Terms and Conditions: https:\u002F\u002Fwww.payplus.co.il\u002Fprivacy\u003C\u002Fp>\n\u003Cp>The above records, the transaction details, are not treated as belonging to PayPlus and are never used for any other purposes.\u003C\u002Fp>\n\u003Cp>The external files referenced by this plugin, due to WordPress policy recommendations, are all included in the plugin directory.\u003C\u002Fp>\n\u003Ch3>8.1.5  – 15-03-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Feature   – Added VAT selection prompt for partial refunds, allowing admins to choose whether the refunded amount includes VAT or is VAT-exempt.\u003C\u002Fli>\n\u003Cli>Fix       – Resolved an issue where saved payment tokens could override the PayPlus Embedded selection, causing the checkout to revert to a previously saved card instead of using newly entered card details.\u003C\u002Fli>\n\u003Cli>Fix       – Fixed token saving failure when the optional “Name for Invoice” or “Alternative ID\u002FVAT” fields were filled during PayPlus Embedded checkout.\u003C\u002Fli>\n\u003Cli>Feature   – PRUID history tracking: all payment page request UIDs are now stored with timestamps, enabling recovery of orders where the UID changed. The “Get PayPlus Data” button shows a selection popup with a “Try All” option.\u003C\u002Fli>\n\u003Cli>Feature   – Optional order total display inside PayPlus Embedded payment form for both Classic and Blocks checkout, with automatic updates on coupon\u002Fshipping changes.\u003C\u002Fli>\n\u003Cli>Tweak     – Reduced checkout order-status polling frequency to prevent excessive server load on slower sites.\u003C\u002Fli>\n\u003Cli>Fix       – Fixed Hebrew character corruption (appearing as raw Unicode escapes) in PayPlus API payloads for certain server configurations.\u003C\u002Fli>\n\u003Cli>Tweak     – PRUID history is now used by the cron job and the Orders Validator for more reliable order status recovery.\u003C\u002Fli>\n\u003Cli>Fix       – Fixed expiry field order in PayPlus Embedded for LTR locales.\u003C\u002Fli>\n\u003Cli>Fix       – The “Include Apple Pay Script” setting now correctly loads the Apple Pay script on Blocks checkout for all iframe display modes.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.1.4  – 10-03-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix       – Fixed an issue where redirect URLs after payment could be malformed (& converted to &), potentially causing broken thank-you page loads or missing order details.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.1.3  – 25-02-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix       – Resolved “Redirect” and “Next page iframe” display issues on the order-pay page for specific customer environments caused by an unnecessary static flag preventing proper rendering.\u003C\u002Fli>\n\u003Cli>Feature   – Added inline loader to PayPlus Embedded “Place Order” button, providing immediate visual feedback during payment processing for improved user experience. \u003C\u002Fli>\n\u003Cli>Tweak     – Addressed WordPress Plugin Check (PCP) compliance requirements.\u003C\u002Fli>\n\u003Cli>Fix       – Improved Invoice+ error message handling on the orders page to properly display API error details.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.1.2  – 24-02-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Feature   – Full PW Gift Cards integration for Blocks Checkout across all PayPlus payment methods, including correct discount handling, order totals, and debit timing.\u003C\u002Fli>\n\u003Cli>Fix       – PW Gift Cards discount now applied correctly in Iframe (next page) and Redirect modes in Blocks Checkout, consistent with Popup and Same-Page Iframe behavior.\u003C\u002Fli>\n\u003Cli>Feature   – Added option to mark the Customer Invoice Name field as required in both Classic and Blocks Checkout.\u003C\u002Fli>\n\u003Cli>Feature   – Added option to set a custom label and placeholder for the Customer Invoice Name field in both Classic and Blocks Checkout.\u003C\u002Fli>\n\u003Cli>Tweak     – PayPlus Embedded loader: when “Hide PayPlus logo when showing loader” is enabled, “Processing Payment…” (or its Hebrew translation) is now always centered in the loader and displayed clearly.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.1.1  – 23-02-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix       – TV power-down effect in Blocks Checkout is now driven by the plugin setting rather than CSS positioning, ensuring it triggers reliably regardless of theme styles.\u003C\u002Fli>\n\u003Cli>Tweak     – Blocks Checkout popup and same-page iframe modes now open instantly — the PayPlus payment page link is fetched asynchronously after checkout submission instead of blocking the Store API response.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.1.0  – 22-02-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix       – Improved redirect handling across all browsers with a unified solution, eliminating the need for browser-specific settings and checkboxes.\u003C\u002Fli>\n\u003Cli>Tweak     – Added translated “Payment received – redirecting…” screen that appears briefly when using fallback redirect method.\u003C\u002Fli>\n\u003Cli>Fix       – Resolved issue where changing delivery method in classic checkout would incorrectly switch the selected payment method in the payment list.\u003C\u002Fli>\n\u003Cli>Tweak     – Callback handler now processes orders in “failed” status (in addition to “pending”) since callbacks occur after order creation and payment.\u003C\u002Fli>\n\u003Cli>Added     – Optional TV power-down effect for popup iframe mode. When enabled via plugin settings, displays a classic CRT television shutdown animation before redirecting to thank you page.\u003C\u002Fli>\n\u003Cli>Fix       – Order payment method now reflects the actual payment method used (e.g., credit card, Google Pay, Bit) rather than the initially selected gateway, ensuring accuracy in WooCommerce order details and invoices.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.0.9  – 18-02-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Fix       – Fixed default setting for Firefox-compatible redirect mode – polling fallback is now enabled by default as intended.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>8.0.7  – 18-02-2026\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Tweak     – Added automatic polling fallback for iframe payment redirects in both blocks and classic checkouts. This ensures reliable redirects for Firefox users and other scenarios where the iframe cannot communicate via postMessage. The system polls the server for order completion status and redirects to the thank-you page automatically.\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Fix       – Fixed EMV POS device functionality issue when only one admin user was configured.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>\n\u003Cp>Tweak – Improved the \u003Ccode>payPlusRemote()\u003C\u002Fcode> function to better handle \u003Ccode>$payload\u003C\u002Fcode> issues.\u003C\u002Fp>\n\u003C\u002Fli>\n\u003Cli>Tweak – Removed outdated logs and deprecated API calls.\u003C\u002Fli>\n\u003Cli>Tweak – Optimized payment page logic to reuse existing pages when possible, reducing unnecessary API requests.\u003C\u002Fli>\n\u003Cli>Tweak – Corrected inaccurate status reporting in “Orders Reports\u002FValidator”.\u003C\u002Fli>\n\u003Cli>Tweak – Streamlined \u003Ccode>callback_response\u003C\u002Fcode> by removing redundant functions and passing data directly instead of using SQL.\u003C\u002Fli>\n\u003Cli>Added – When “Update status in IPN” is enabled, the callback function will skip status updates and related checks.\u003C\u002Fli>\n\u003Cli>Added – Disallow voucher payment for shipping – Enforce a minimum amount for non-voucher payments: voucher payments can no longer be used to pay for shipping, preventing customers from covering delivery costs with vouchers.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fpayplus-payment-gateway\u002Ftrunk\u002FCHANGELOG.md\" rel=\"nofollow ugc\">See changelog for all versions\u003C\u002Fa>.\u003C\u002Fp>\n","Accept credit\u002Fdebit card payments or other methods such as bit, Apple Pay, Google Pay in one page. Create digitally signed invoices & much more!",79632,"2026-03-15T06:09:00.000Z",[111,112,113,114,115],"charges-and-refunds","credit-cards","subscriptions","tokenization","woocommerce-payment-gateway","https:\u002F\u002Fwww.payplus.co.il\u002Fwordpress","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fpayplus-payment-gateway.8.1.5.zip",93,"2024-07-09 00:00:00",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":130,"num_ratings":131,"last_updated":132,"tested_up_to":49,"requires_at_least":133,"requires_php":134,"tags":135,"homepage":138,"download_link":139,"security_score":26,"vuln_count":13,"unpatched_count":13,"last_vuln_date":27,"fetched_at":28},"wc-moneris-payment-gateway","WC Moneris Payment Gateway","3.6","akshayaswaroop","https:\u002F\u002Fprofiles.wordpress.org\u002Fakshayaswaroop\u002F","\u003Cp>Moneris is Canada’s leading processor of Debit and credit card payments. This WooCommerce extension \u003Cstrong>automatically\u003C\u002Fstrong> adds moneris payment gateway to your woocommerce website and allows you to keep the customer on your site for the checkout process.\u003C\u002Fp>\n\u003Ch4>Key Features:\u003C\u002Fh4>\n\u003Cul>\n\u003Cli>API based credit card payment method which allows a user to enter a credit card on the WooCommerce checkout page and capture payment to the Moneris account without leaving the WooCommerce website.\u003C\u002Fli>\n\u003Cli>Switch between \u003Cstrong>Sandbox\u003C\u002Fstrong> and \u003Cstrong>Live\u003C\u002Fstrong> environments.\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>If you enjoyed this plugin then please put a review, that will encourage me to bring some more …\u003C\u002Fp>\n","A simple plugin that easily add moneris payment gateway to your WooCommerce website.",900,22531,84,5,"2025-08-13T17:29:00.000Z","4.9","",[19,136,22,121,137],"moneris","woocommerce-moneris-payment-gateway","https:\u002F\u002Fwww.wpheka.com\u002Fproduct\u002Fwc-moneris-payment-gateway","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fwc-moneris-payment-gateway.3.6.zip",{"attackSurface":141,"codeSignals":178,"taintFlows":191,"riskAssessment":241,"analyzedAt":251},{"hooks":142,"ajaxHandlers":174,"restRoutes":175,"shortcodes":176,"cronEvents":177,"entryPointCount":13,"unprotectedCount":13},[143,149,154,158,162,166,170],{"type":144,"name":145,"callback":146,"file":147,"line":148},"action","before_woocommerce_init","closure","mpgs-payment-gateway.php",37,{"type":150,"name":151,"callback":152,"file":147,"line":153},"filter","woocommerce_payment_gateways","mpgs_add_to_gateways",86,{"type":144,"name":155,"callback":156,"file":147,"line":157},"admin_notices","mpgs_woocommerce_missing_notice",125,{"type":144,"name":159,"callback":160,"file":147,"line":161},"wp_enqueue_scripts","payment_scripts",274,{"type":144,"name":163,"callback":164,"file":147,"line":165},"woocommerce_receipt_mpgs","receipt_page",275,{"type":144,"name":167,"callback":168,"file":147,"line":169},"woocommerce_api_mpgs","process_response",276,{"type":144,"name":171,"callback":172,"file":147,"line":173},"plugins_loaded","mpgs_init",1210,[],[],[],[],{"dangerousFunctions":179,"sqlUsage":180,"outputEscaping":182,"fileOperations":13,"externalRequests":184,"nonceChecks":31,"capabilityChecks":13,"bundledLibraries":190},[],{"prepared":13,"raw":13,"locations":181},[],{"escaped":183,"rawEcho":184,"locations":185},8,2,[186,188],{"file":147,"line":26,"context":187},"raw output",{"file":147,"line":189,"context":187},690,[],[192,219,230],{"entryPoint":193,"graph":194,"unsanitizedCount":13,"severity":218},"mpgs_init (mpgs-payment-gateway.php:122)",{"nodes":195,"edges":214},[196,201,207,209],{"id":197,"type":198,"label":199,"file":147,"line":200},"n0","source","$_REQUEST",729,{"id":202,"type":203,"label":204,"file":147,"line":205,"wp_function":206},"n1","sink","wp_remote_get() [SSRF]",773,"wp_remote_get",{"id":208,"type":198,"label":199,"file":147,"line":200},"n2",{"id":210,"type":203,"label":211,"file":147,"line":212,"wp_function":213},"n3","wp_redirect() [Open Redirect]",827,"wp_redirect",[215,217],{"from":197,"to":202,"sanitized":216},true,{"from":208,"to":210,"sanitized":216},"low",{"entryPoint":220,"graph":221,"unsanitizedCount":13,"severity":218},"process_response (mpgs-payment-gateway.php:719)",{"nodes":222,"edges":227},[223,224,225,226],{"id":197,"type":198,"label":199,"file":147,"line":200},{"id":202,"type":203,"label":204,"file":147,"line":205,"wp_function":206},{"id":208,"type":198,"label":199,"file":147,"line":200},{"id":210,"type":203,"label":211,"file":147,"line":212,"wp_function":213},[228,229],{"from":197,"to":202,"sanitized":216},{"from":208,"to":210,"sanitized":216},{"entryPoint":231,"graph":232,"unsanitizedCount":13,"severity":218},"\u003Cmpgs-payment-gateway> (mpgs-payment-gateway.php:0)",{"nodes":233,"edges":238},[234,235,236,237],{"id":197,"type":198,"label":199,"file":147,"line":200},{"id":202,"type":203,"label":204,"file":147,"line":205,"wp_function":206},{"id":208,"type":198,"label":199,"file":147,"line":200},{"id":210,"type":203,"label":211,"file":147,"line":212,"wp_function":213},[239,240],{"from":197,"to":202,"sanitized":216},{"from":208,"to":210,"sanitized":216},{"summary":242,"deductions":243},"The \"salmanpatnee-mpgs-for-woocommerce\" plugin v2.0.0 exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points is commendable, indicating a limited attack surface. Furthermore, the code signals reveal no dangerous functions, no raw SQL queries (100% prepared statements), no file operations, and no critical or high-severity taint analysis flows.  The plugin also appears to handle output escaping reasonably well, with only a minor percentage of outputs not being properly escaped, and it includes a nonce check. The complete lack of historical vulnerability data, including CVEs, is a significant positive indicator of ongoing security diligence.\n\nWhile the plugin demonstrates good practices, there are minor areas for potential improvement. The presence of external HTTP requests, though not inherently a vulnerability, warrants attention to ensure the destinations are reputable and requests are handled securely. The complete absence of capability checks, while seemingly benign given the limited attack surface, could become a concern if future versions introduce new functionalities that require authorization. Overall, the plugin appears to be well-secured, with no immediate critical threats identified by this analysis.",[244,247,249],{"reason":245,"points":246},"Outputs not properly escaped",4,{"reason":248,"points":184},"External HTTP requests",{"reason":250,"points":98},"No capability checks","2026-03-16T23:04:31.427Z",{"wat":253,"direct":262},{"assetPaths":254,"generatorPatterns":257,"scriptPaths":258,"versionParams":259},[255,256],"\u002Fwp-content\u002Fplugins\u002Fsalmanpatnee-mpgs-for-woocommerce\u002Fassets\u002Fcss\u002Fmpgs-checkout.css","\u002Fwp-content\u002Fplugins\u002Fsalmanpatnee-mpgs-for-woocommerce\u002Fassets\u002Fjs\u002Fmpgs-checkout.js",[],[],[260,261],"\u002Fwp-content\u002Fplugins\u002Fsalmanpatnee-mpgs-for-woocommerce\u002Fassets\u002Fcss\u002Fmpgs-checkout.css?ver=","\u002Fwp-content\u002Fplugins\u002Fsalmanpatnee-mpgs-for-woocommerce\u002Fassets\u002Fjs\u002Fmpgs-checkout.js?ver=",{"cssClasses":263,"htmlComments":266,"htmlAttributes":267,"restEndpoints":270,"jsGlobals":271,"shortcodeOutput":273},[264,265],"mpgs-checkout-button","mpgs-checkout-form",[],[268,269],"data-mpgs-checkout-url","data-mpgs-checkout-id",[],[272],"mpgs_checkout_params",[]]