Does Shift4 for WooCommerce have any unpatched vulnerabilities?

No published vulnerabilities and no findings under coordinated disclosure as of the latest data update. Always keep the plugin updated to the latest version.

Is Shift4 for WooCommerce compatible with WordPress 6.9.4?

According to WordPress.org data, Shift4 for WooCommerce 1.0.11 has been tested up to WordPress 6.9.4. Check the plugin's changelog for the latest compatibility information.

Is Shift4 for WooCommerce compatible with PHP 8.0+?

Shift4 for WooCommerce requires PHP 8.0 or higher. Most modern WordPress hosts run PHP 8.1 or 8.2. If you are on an older PHP version, consider upgrading before installing this plugin.

How often is Shift4 for WooCommerce updated?

Shift4 for WooCommerce was last updated on Dec 5, 2025. Frequent updates are generally a positive security signal.

What is Shift4 for WooCommerce's security score?

Shift4 for WooCommerce has a WP-Safety security score of 100/100. This score is computed from CVE history, patch response time, developer trust signals, and plugin maintenance activity.

Shift4 for WooCommerce Security & Risk Analysis

wordpress.org/plugins/shift4-for-woocommerce

Plugins enables payments in your WooCommerce store using two Shift4 methods.

20 active installs v1.0.11 PHP 8.0+ WP 6.7+ Updated Dec 5, 2025

online-storesell-onlineshift4shopwoocommerce

A · Safe

CVEs total0

Unpatched0

Last CVENever

Plugin page Download

Safety Verdict

Is Shift4 for WooCommerce Safe to Use in 2026?

Generally Safe

Score 100/100

Shift4 for WooCommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5mo ago

Risk Assessment

The static analysis of the "shift4-for-woocommerce" v1.0.11 plugin reveals a strong adherence to secure coding practices. There are no identified dangerous functions, all SQL queries utilize prepared statements, and all output is properly escaped. The absence of file operations and external HTTP requests further minimizes the attack surface. Importantly, the plugin exhibits a clean vulnerability history with zero recorded CVEs, indicating a commitment to maintaining a secure codebase over time. This overall posture suggests a well-developed and security-conscious plugin.

Vulnerabilities

None known

Shift4 for WooCommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.

Version History

Shift4 for WooCommerce Release Timeline

No version history available.

Code Analysis

Analyzed Mar 16, 2026

Shift4 for WooCommerce Code Analysis

Dangerous Functions

Raw SQL Queries

0 prepared

Unescaped Output

23 escaped

Nonce Checks

Capability Checks

File Operations

External Requests

Bundled Libraries

Output Escaping

100% escaped23 total outputs

Attack Surface

Shift4 for WooCommerce Attack Surface

Entry Points0

Unprotected0

WordPress Hooks 14

filterwoocommerce_payment_gateway_get_saved_payment_method_option_htmlGateway\Card.php:65

filterwoocommerce_saved_payment_methods_listGateway\Card.php:68

actionwoocommerce_payment_token_deletedGateway\Command\DeleteCardCommand.php:16

actionwoocommerce_generate_shift4_config_section_htmlGateway\SharedGatewayConfigTrait.php:22

filterpre_update_option_woocommerce_shift4_card_settingsGateway\SharedGatewayConfigTrait.php:29

filterpre_update_option_woocommerce_shift4_applepay_settingsGateway\SharedGatewayConfigTrait.php:35

actionwoocommerce_order_status_changedModel\OrderStatusChangeHandler.php:20

actionbefore_woocommerce_initshift4-for-woocommerce.php:43

actionadmin_initshift4-for-woocommerce.php:77

actionplugins_loadedshift4-for-woocommerce.php:88

filterwoocommerce_payment_gatewaysshift4-for-woocommerce.php:100

actionwoocommerce_blocks_payment_method_type_registrationshift4-for-woocommerce.php:106

actionwp_footershift4-for-woocommerce.php:125

actionwp_headshift4-for-woocommerce.php:186

Maintenance & Trust

Shift4 for WooCommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4

Last updatedDec 5, 2025

PHP min version8.0

Downloads959

Community Trust

Rating0/100

Number of ratings0

Active installs20

Alternatives

Shift4 for WooCommerce Alternatives

WooCommerce

woocommerce

Everything you need to launch an online store in days and keep it growing for years. From your first sale to millions in revenue, Woo is with you.

7.0M 43 CVEs

CT Commerce Lite 🛒 | Fast & Flexible WordPress eCommerce Plugin

ctc-lite

100

CT Commerce Lite** is an ultra-lightweight, block-based eCommerce plugin for WordPress

200 No CVEs

Shift4Shop Online Store

3dcart-wp-online-store

Shift4Shop Online Store provides a streamlined way to sell any number of products from your Shift4Shop store directly on your WordPress blog.

40 No CVEs

Buy One Get One Free for WooCommerce

buy-one-get-one-free-for-woocommerce

Completely free and simple plugin to add buy one get one free offers to WooCommerce. No ads, no upsells.

10 No CVEs

Developer Profile

Shift4 for WooCommerce Developer Profile

Shift4

1 plugin · 20 total installs

trust score

Avg Security Score

100/100

Avg Patch Time

30 days

View full developer profile

Detection Fingerprints

How We Detect Shift4 for WooCommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths

/wp-content/plugins/shift4-for-woocommerce/assets/js/shift4.js/wp-content/plugins/shift4-for-woocommerce/assets/js/shift4-card-legacy-checkout.js/wp-content/plugins/shift4-for-woocommerce/assets/js/shift4-applepay-legacy-checkout.js/wp-content/plugins/shift4-for-woocommerce/assets/css/shift4.css/wp-content/plugins/shift4-for-woocommerce/build/index.js

Script Paths

https://js.dev.shift4.com/shift4.jshttps://applepay.cdn-apple.com/jsapi/v1/apple-pay-sdk.js

Version Parameters

shift4-for-woocommerce/assets/js/shift4.js?ver=shift4-for-woocommerce/assets/js/shift4-card-legacy-checkout.js?ver=shift4-for-woocommerce/assets/js/shift4-applepay-legacy-checkout.js?ver=shift4-for-woocommerce/assets/css/shift4.css?ver=shift4-for-woocommerce/build/index.js?ver=

HTML / DOM Fingerprints

CSS Classes

shift4-apple-pay-button

Data Attributes

data-gateway-id="shift4"data-payment-method-data-attribute="shift4"data-apple-pay-button-id="shift4-apple-pay-button"

JS Globals

shift4CardViewSettingsshift4ApplePaySettings

FAQ