Simple PAY.JP Payment Security & Risk Analysis

wordpress.org/plugins/simple-pay-jp-payment

This plugin provides payment form by PAY.JP with simple shortcode.

200 active installs v1.3.1 PHP 5.6+ WP 4.9+ Updated Apr 9, 2025
credit-carde-commercepaymentpayment-requestshopping
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Simple PAY.JP Payment Safe to Use in 2026?

Generally Safe

Score 100/100

Simple PAY.JP Payment has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 12mo ago
Risk Assessment

The "simple-pay-jp-payment" plugin version 1.3.1 exhibits a strong security posture based on the provided static analysis. The plugin demonstrates excellent adherence to secure coding practices, with no identified dangerous functions, all SQL queries utilizing prepared statements, and a very high percentage of properly escaped output. Crucially, there are no detected taint flows indicating potential injection vulnerabilities. The plugin also incorporates essential security mechanisms like nonce and capability checks, contributing to a robust defense against common attack vectors. Its vulnerability history is clean, with zero known CVEs, further reinforcing its secure design and maintenance.

Key Concerns

  • No recorded vulnerabilities in history
  • No critical or high severity taint flows
  • All SQL queries use prepared statements
  • High percentage of properly escaped output
  • No dangerous functions found
  • No external HTTP requests detected
  • No file operations detected
  • No unprotected entry points found
  • Nonce check is present
  • Capability check is present
  • No bundled libraries
Vulnerabilities
None known

Simple PAY.JP Payment Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Simple PAY.JP Payment Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
41 escaped
Nonce Checks
1
Capability Checks
1
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

95% escaped43 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
simplepayjppayment_admin_init (simple-payjp-payment.php:498)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Simple PAY.JP Payment Attack Surface

Entry Points1
Unprotected0

Shortcodes 1

[simple-payjp-payment] simple-payjp-payment.php:378
WordPress Hooks 6
actiontemplate_redirectsimple-payjp-payment.php:381
actionwp_enqueue_scriptssimple-payjp-payment.php:392
actionadmin_menusimple-payjp-payment.php:406
actionadmin_initsimple-payjp-payment.php:570
actionadmin_enqueue_scriptssimple-payjp-payment.php:584
actionplugins_loadedsimple-payjp-payment.php:592
Maintenance & Trust

Simple PAY.JP Payment Maintenance & Trust

Maintenance Signals

WordPress version tested6.7.5
Last updatedApr 9, 2025
PHP min version5.6
Downloads5K

Community Trust

Rating100/100
Number of ratings3
Active installs200
Developer Profile

Simple PAY.JP Payment Developer Profile

koyacode

2 plugins · 400 total installs

91
trust score
Avg Security Score
96/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Simple PAY.JP Payment

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/simple-payjp-payment/css/admin.css/wp-content/plugins/simple-payjp-payment/css/frontend.css/wp-content/plugins/simple-payjp-payment/js/admin.js/wp-content/plugins/simple-payjp-payment/js/frontend.js
Script Paths
/wp-content/plugins/simple-payjp-payment/js/frontend.js
Version Parameters
simple-payjp-payment/css/admin.css?ver=simple-payjp-payment/css/frontend.css?ver=simple-payjp-payment/js/admin.js?ver=simple-payjp-payment/js/frontend.js?ver=

HTML / DOM Fingerprints

CSS Classes
simplepayjppayment_payment_form
JS Globals
payjpsimplepayjppayment_public_key
FAQ

Frequently Asked Questions about Simple PAY.JP Payment