Stax Payments Security & Risk Analysis

wordpress.org/plugins/stax-payments

Take credit card payments on your Wordpress site using Stax Payments.

30 active installs v1.0.1 PHP 7.2+ WP 5.2+ Updated Jan 11, 2024
checkoutcredit-carddebit-cardpaymentsstax
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Download
Safety Verdict

Is Stax Payments Safe to Use in 2026?

Generally Safe

Score 85/100

Stax Payments has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 2yr ago
Risk Assessment

The "stax-payments" plugin v1.0.1 demonstrates a strong security posture based on the provided static analysis. The plugin has zero recorded vulnerabilities, indicating a history of secure development or timely patching. The static analysis reveals no dangerous functions, SQL injection risks, or file operations, and all SQL queries are properly prepared. The plugin also incorporates good security practices such as nonce checks and capability checks, and importantly, has no unprotected entry points identified in the attack surface analysis. The taint analysis shows no unsanitized paths, further reinforcing the low risk profile.

Vulnerabilities
None known

Stax Payments Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Stax Payments Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
3
23 escaped
Nonce Checks
1
Capability Checks
4
File Operations
0
External Requests
0
Bundled Libraries
0

Output Escaping

88% escaped26 total outputs
Data Flows
All sanitized

Data Flow Analysis

2 flows
stax_admin_render (functions\settings.php:34)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Stax Payments Attack Surface

Entry Points2
Unprotected0

REST API Routes 1

POST/wp-json/stax/settingsfunctions\rest.php:15

Shortcodes 1

[stax_button] functions\shortcode.php:7
WordPress Hooks 11
actionadmin_enqueue_scriptsfunctions\enqueues.php:31
actionwp_enqueue_scriptsfunctions\enqueues.php:55
filterscript_loader_tagfunctions\enqueues.php:70
actionrest_api_initfunctions\rest.php:14
actionadmin_headfunctions\shortcode.php:33
filtermce_external_pluginsfunctions\shortcode.php:37
filtermce_buttonsfunctions\shortcode.php:38
actionwp_enqueue_scriptsgutenberg-block\stax-payments-button.php:4
actioninitgutenberg-block\stax-payments-button.php:8
filterrender_blockgutenberg-block\stax-payments-button.php:34
actionadmin_menustax-payments.php:58
Maintenance & Trust

Stax Payments Maintenance & Trust

Maintenance Signals

WordPress version tested6.4.8
Last updatedJan 11, 2024
PHP min version7.2
Downloads1K

Community Trust

Rating0/100
Number of ratings0
Active installs30
Developer Profile

Stax Payments Developer Profile

Stax

1 plugin · 30 total installs

84
trust score
Avg Security Score
85/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Stax Payments

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/stax-payments/assets/button.css/wp-content/plugins/stax-payments/assets/settings.css/wp-content/plugins/stax-payments/assets/handler.js/wp-content/plugins/stax-payments/live-preview-widget/dist/assets/index.js/wp-content/plugins/stax-payments/live-preview-widget/dist/assets/index.css/wp-content/plugins/stax-payments/gutenberg-block/dist/block.js
Script Paths
https://checkout.staxpayments.com/v1/checkout.min.js
Version Parameters
stax-payments/assets/button.css?ver=stax-payments/assets/settings.css?ver=stax-payments/assets/handler.js?ver=stax-payments/live-preview-widget/dist/assets/index.js?ver=stax-payments/live-preview-widget/dist/assets/index.css?ver=stax-payments/gutenberg-block/dist/block.js?ver=

HTML / DOM Fingerprints

CSS Classes
stax-payments-button
Data Attributes
data-webpaymentstokendata-buttondata-modedata-displayConfirmation--bg-custom--text-custom+1 more
JS Globals
STAX
REST Endpoints
/wp-json/stax/settings
Shortcode Output
[stax_button]
FAQ

Frequently Asked Questions about Stax Payments