[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fcq4FdR8DLNRqE-HjZoBGAXwVxtNN9EYOgSxX_pVTYUk":3,"$f973aEDjJHSkEtzcT970qygjqmofhkunfmWrY0h_9JCg":293,"$fQ86rQlflT-_4a8Enu8fIQqXNk54CFb6DEdQS1aKlg8M":297},{"slug":4,"name":5,"version":6,"author":7,"author_profile":8,"description":9,"short_description":10,"active_installs":11,"downloaded":12,"rating":13,"num_ratings":14,"last_updated":15,"tested_up_to":16,"requires_at_least":17,"requires_php":18,"tags":19,"homepage":25,"download_link":26,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29,"discovery_status":30,"vulnerabilities":31,"developer":32,"crawl_stats":28,"alternatives":36,"analysis":140,"fingerprints":276},"syspay-for-woocommerce","Syspay","2.2.5","SysPay","https:\u002F\u002Fprofiles.wordpress.org\u002Fsyspay\u002F","\u003Cp>Easy payment solution for your WordPress website:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>This plugins provides the syspay payment gateway for WooCommerce\u003C\u002Fli>\n\u003Cli>Accept online credit card payments on your online shop\u003C\u002Fli>\n\u003C\u002Ful>\n","Syspay payment gateway plugin for WooCommerce.",10,2653,100,1,"2026-03-04T12:26:00.000Z","6.8.5","6.0.1","8.0.0",[20,21,22,23,24],"checkout","online-payment","paiement","payment","syspay","https:\u002F\u002Fapp.syspay.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.2.2.5.zip",0,null,"2026-04-16T10:56:18.058Z","no_bundle",[],{"slug":24,"display_name":7,"profile_url":8,"plugin_count":14,"total_installs":11,"avg_security_score":13,"avg_patch_time_days":33,"trust_score":34,"computed_at":35},30,94,"2026-07-15T06:27:01.201Z",[37,63,84,102,120],{"slug":38,"name":39,"version":40,"author":41,"author_profile":42,"description":43,"short_description":44,"active_installs":45,"downloaded":46,"rating":47,"num_ratings":48,"last_updated":49,"tested_up_to":50,"requires_at_least":51,"requires_php":51,"tags":52,"homepage":58,"download_link":59,"security_score":60,"vuln_count":61,"unpatched_count":14,"last_vuln_date":62,"fetched_at":29},"zoho-subscriptions","Zoho Billing – Embed Payment Form","4.1","Zoho Subscriptions","https:\u002F\u002Fprofiles.wordpress.org\u002Fyamuna_subramanian\u002F","\u003Ch4>ZOHO BILLING PLUGIN FOR WORDPRESS\u003C\u002Fh4>\n\u003Cp>This plugin allows you to embed a payment without any coding on your WordPress website. Your customers\u002Fvisitors can make one-time and recurring payments to you using the embedded payment form.\u003C\u002Fp>\n\u003Ch4>WHAT IS ZOHO BILLING?\u003C\u002Fh4>\n\u003Cp>\u003Ca href=\"https:\u002F\u002Fwww.zoho.com\u002Fbilling\u002F\" rel=\"nofollow ugc\">Zoho Billing\u003C\u002Fa> is billing software that makes it easy to handle your customers’ entire billing life-cycle. It can help you with automated recurring billing, managing subscriptions, sending professional tax-compliant invoices, and getting paid on time, every time.\u003C\u002Fp>\n\u003Cp>You must to have an account with Zoho Billing to use this plugin, \u003Ca href=\"https:\u002F\u002Fwww.zoho.com\u002Fbilling\u002Fsignup\u002F\" rel=\"nofollow ugc\">sign up now\u003C\u002Fa>, if you haven’t already.\u003C\u002Fp>\n\u003Ch3>Integration\u002FAuthentication Setup\u003C\u002Fh3>\n\u003Cp>After installing and activating the plugin, you need to connect it to your Zoho Billing organization. To do this:\u003C\u002Fp>\n\u003Col>\n\u003Cli>Navigate to the \u003Cstrong>Zoho Billing\u003C\u002Fstrong> plugin from the Installed Plugins section in the left sidebar.\u003C\u002Fli>\n\u003Cli>Select the domain from which you access Zoho Billing.\u003C\u002Fli>\n\u003Cli>Enter the \u003Cstrong>Connector Key\u003C\u002Fstrong> from Zoho Billing.\u003Cbr \u002F>\n\u003Cem>Tip: You can find your domain and the Connector Key by going to Zoho Billing > Settings > Integrations & Marketplace > Other Apps > WordPress Integration.\u003C\u002Fem>\u003C\u002Fli>\n\u003Cli>Click the \u003Cstrong>Save\u003C\u002Fstrong> button\u003C\u002Fli>\n\u003C\u002Fol>\n\u003Ch3>EMBED PAYMENT FORMS\u003C\u002Fh3>\n\u003Cp>You can embed your hosted payment pages from Zoho Billing by including the following \u003Cstrong>shortcode\u003C\u002Fstrong> while drafting (or editing) a page\u002Fpost in WordPress:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[zs plan_code=\"BASIC\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Copy and paste the shortcode above in WordPress’ editor. Next, replace BASIC in the shortcode with your plan’s actual Plan Code. You can see what your embedded hosted payment page looks like by previewing your page\u002Fpost.\u003C\u002Fp>\n\u003Cp>\u003Cem>Tip: You can find your plan’s Plan Code by going to Zoho Billing > Product Catalog > Subscription Items. Select a product and copy the Plan Code for the plan whose hosted payment pages you’d like to embed.\u003C\u002Fem>\u003C\u002Fp>\n\u003Cp>You can adjust the width of your embedded hosted payment page by specifying a custom width in the shortcode above. Here’s how:\u003C\u002Fp>\n\u003Cpre>\u003Ccode>[zs plan_code=\"BASIC\" width=\"600\"]\n\u003C\u002Fcode>\u003C\u002Fpre>\n\u003Cp>Replace 600 in the shortcode above with your required width. If you do not include the “width” parameter, the default width will be set as 700.\u003C\u002Fp>\n\u003Cp>Learn more about the Zoho Billing plugin from our \u003Ca href=\"https:\u002F\u002Fwww.zoho.com\u002Fbilling\u002Fhelp\u002Fsettings\u002Fintegrations\u002Fwordpress-integration.html\" rel=\"nofollow ugc\">help document\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>WHO DO I CONTACT FOR MORE INFORMATION?\u003C\u002Fh4>\n\u003Cp>You can reach out to our support team at support@zohobilling.com with any questions you have about this plugin and we’d be happy to assist you.\u003C\u002Fp>\n","Embed payment forms on your WordPress pages\u002Fposts without any coding.",500,15304,40,4,"2025-11-30T07:56:00.000Z","6.9.4","",[53,54,55,56,57],"checkout-forms","one-time-payments","online-payments","pci-complaint","recurring-payments","https:\u002F\u002Fwww.zoho.com\u002Fbilling\u002Fhelp\u002Fsettings\u002Fintegrations\u002Fwordpress-integration.html","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fzoho-subscriptions.1.1.zip",77,2,"2025-09-22 00:00:00",{"slug":64,"name":65,"version":66,"author":67,"author_profile":68,"description":69,"short_description":70,"active_installs":71,"downloaded":72,"rating":73,"num_ratings":74,"last_updated":75,"tested_up_to":50,"requires_at_least":76,"requires_php":77,"tags":78,"homepage":82,"download_link":83,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"easytransac","EasyTransac for WooCommerce","3.0.3","Easytransac","https:\u002F\u002Fprofiles.wordpress.org\u002Feasytransac\u002F","\u003Ch4>Introduction\u003C\u002Fh4>\n\u003Cp>Notre module EasyTransac pour WooCommerce vous permet d’encaisser simplement et en toute sécurité les paiements en ligne sur votre site WordPress.\u003C\u002Fp>\n\u003Cp>EasyTransac est une solution de paiement complète intégrée à WooCommerce, permettant d’accepter plusieurs moyens de paiement avec une configuration simple et sécurisée.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Paiement par Carte Bancaire (Visa, Mastercard, CB)\u003C\u002Fli>\n\u003Cli>Paiement instantané par virement bancaire \u003Cstrong>Pay By Bank (PBB)\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>Paiement \u003Cstrong>SEPA\u003C\u002Fstrong> (prélèvement automatique)\u003C\u002Fli>\n\u003Cli>Paiement \u003Cstrong>One-Click\u003C\u002Fstrong> grâce à la tokenisation sécurisée\u003C\u002Fli>\n\u003Cli>Paiements récurrents via \u003Cstrong>WooCommerce Subscriptions\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unified Checkout\u003C\u002Fstrong> regroupant tous les moyens de paiement\u003C\u002Fli>\n\u003Cli>Compatibilité \u003Cstrong>WooCommerce Blocks\u003C\u002Fstrong> (Checkout et Cart)\u003C\u002Fli>\n\u003Cli>Remboursements partiels et totaux depuis WooCommerce\u003C\u002Fli>\n\u003Cli>Webhooks fiables pour la mise à jour des commandes\u003C\u002Fli>\n\u003Cli>Mode Test (Sandbox)\u003C\u002Fli>\n\u003Cli>Aucun stockage de données sensibles (conformité PCI DSS)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>Compatibilité WooCommerce Subscriptions\u003C\u002Fh4>\n\u003Cp>Le module EasyTransac est compatible avec WooCommerce Subscriptions pour la gestion des paiements récurrents :\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Paiements récurrents\u003C\u002Fli>\n\u003Cli>Renouvellements automatiques\u003C\u002Fli>\n\u003Cli>Gestion des abonnements\u003C\u002Fli>\n\u003Cli>Annulation synchronisée avec EasyTransac\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Le plugin fonctionne également sans WooCommerce Subscriptions.\u003Cbr \u002F>\nDans ce cas, les fonctionnalités liées aux abonnements sont simplement désactivées automatiquement.\u003C\u002Fp>\n\u003Cp>Easy payment solution for your WordPress WooCommerce website.\u003C\u002Fp>\n\u003Cp>EasyTransac is a complete payment solution integrated with WooCommerce, allowing merchants to accept multiple payment methods with a secure and simple configuration.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Accept VISA and Mastercard payments\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Pay By Bank\u003C\u002Fstrong> (instant bank transfer)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>SEPA Direct Debit\u003C\u002Fstrong>\u003C\u002Fli>\n\u003Cli>\u003Cstrong>One-Click\u003C\u002Fstrong> tokenized payments\u003C\u002Fli>\n\u003Cli>Recurring payments (WooCommerce Subscriptions)\u003C\u002Fli>\n\u003Cli>\u003Cstrong>Unified Checkout\u003C\u002Fstrong> including all payment methods\u003C\u002Fli>\n\u003Cli>Full WooCommerce Blocks support\u003C\u002Fli>\n\u003Cli>Partial and full refunds directly from WooCommerce\u003C\u002Fli>\n\u003Cli>Reliable webhook notifications\u003C\u002Fli>\n\u003Cli>Sandbox\u002FTest mode\u003C\u002Fli>\n\u003Cli>PCI DSS compliant — no sensitive data stored\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch4>WooCommerce Subscriptions Compatibility\u003C\u002Fh4>\n\u003Cp>EasyTransac supports WooCommerce Subscriptions for recurring payments:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Recurring payments\u003C\u002Fli>\n\u003Cli>Automatic renewals\u003C\u002Fli>\n\u003Cli>Subscription management\u003C\u002Fli>\n\u003Cli>Cancellation synchronization\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>The plugin also works without WooCommerce Subscriptions.\u003Cbr \u002F>\nSubscription features are automatically disabled when the plugin is not installed.\u003C\u002Fp>\n","EasyTransac payment gateway for WooCommerce: Credit Card, SEPA, Pay By Bank, One-Click, Subscriptions, Unified Checkout and WooCommerce Blocks support …",90,12485,74,3,"2026-04-13T13:57:00.000Z","5.8","7.4",[20,79,80,23,81],"encaissement","moyen-de-paiement","payment-pro","https:\u002F\u002Fwww.easytransac.com","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Feasytransac.3.0.3.zip",{"slug":85,"name":86,"version":87,"author":88,"author_profile":89,"description":90,"short_description":91,"active_installs":47,"downloaded":92,"rating":27,"num_ratings":27,"last_updated":93,"tested_up_to":16,"requires_at_least":94,"requires_php":95,"tags":96,"homepage":100,"download_link":101,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"yottapay-payment-gateway","Yotta Pay Payment Gateway","4.0.1","yottapay","https:\u002F\u002Fprofiles.wordpress.org\u002Fyottapay\u002F","\u003Cp>Start accepting instant payments directly on your store with Yotta Pay Payment Gateway for WooCommerce. Eliminate the fuss of online transactions. No card numbers, expiry dates or security codes. Customers pay with mobile banking.\u003C\u002Fp>\n\u003Ch4>Built to make e-commerce simple\u003C\u002Fh4>\n\u003Cp>Superfast frictionless online\u002Fmobile checkout. Win more customers with a perfect online experience. Payment done in a few seconds.\u003C\u002Fp>\n\u003Cp>Try it out yourself \u003Ca href=\"https:\u002F\u002Fyottapay.co.uk\u002F\" rel=\"nofollow ugc\">here\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Provide seamless online experience while saving money\u003C\u002Fh4>\n\u003Cp>Based on Open Banking, Yotta Pay Payment Gateway is faster and more reliable than any traditional payment gateway. Go cardless to forget fraud, chargebacks, setup fees, and sky-high acquiring charges.\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Up to 10x cheaper than card payment processors\u003C\u002Fli>\n\u003Cli>Fees as low as 0.19%\u003C\u002Fli>\n\u003Cli>No lock-in contract. Cancel anytime\u003C\u002Fli>\n\u003Cli>Save thousands of pounds per year\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Cp>Learn more about the \u003Ca href=\"https:\u002F\u002Fyottapay.co.uk\u002Fpricing\" rel=\"nofollow ugc\">pricing\u003C\u002Fa>.\u003C\u002Fp>\n\u003Ch4>Flexible, safe and robust integration with bank-grade security\u003C\u002Fh4>\n\u003Cp>Yotta Pay Payment Gateway provides account-to-account transfers which means no card details required, no bank details retained. Once the payment is done, the money transfers to your account instantly. We also offer our customers constant online support.\u003C\u002Fp>\n","Yotta Pay is the fastest and most secure way to accept payments via bank account.",3499,"2025-12-23T10:44:00.000Z","5.3","7.0",[20,97,98,55,99],"ecommerce","online-banking","yotta-pay","https:\u002F\u002Fyottapay.co.uk\u002Fonline-checkout","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fyottapay-payment-gateway.4.0.1.zip",{"slug":103,"name":104,"version":105,"author":106,"author_profile":107,"description":108,"short_description":109,"active_installs":33,"downloaded":110,"rating":27,"num_ratings":27,"last_updated":111,"tested_up_to":50,"requires_at_least":112,"requires_php":77,"tags":113,"homepage":117,"download_link":118,"security_score":13,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":119},"bookster-paypal","Bookster PayPal Addon","3.0.0","Bookster","https:\u002F\u002Fprofiles.wordpress.org\u002Fbookster\u002F","\u003Cp>Accept PayPal payments directly in your Bookster booking form.\u003C\u002Fp>\n\u003Cp>Customers pay with credit cards, debit cards, or PayPal balance. Secure checkout integrated seamlessly into your appointment booking process.\u003C\u002Fp>\n\u003Ch3>Who This Is Perfect For\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Hair salons requiring deposits to reduce no-shows\u003C\u002Fli>\n\u003Cli>Consultants collecting payment before sessions\u003C\u002Fli>\n\u003Cli>Fitness trainers taking class payments upfront\u003C\u002Fli>\n\u003Cli>Tutors accepting lesson payments in advance\u003C\u002Fli>\n\u003Cli>Any service business that wants guaranteed payment when customers book\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>🔷 Key Features\u003C\u002Fh3>\n\u003Ch3>Quick Setup (No Coding Required)\u003C\u002Fh3>\n\u003Cp>Install the addon, get your PayPal API credentials, paste them into the settings, and you’re done. The entire setup takes about 5 minutes following our step-by-step guide in the \u003Cstrong>Installation\u003C\u002Fstrong> tab.\u003C\u002Fp>\n\u003Ch3>Secure & Trusted\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>All payment processing happens on PayPal’s secure servers (PCI-compliant)\u003C\u002Fli>\n\u003Cli>Customer credit card information never touches your WordPress site\u003C\u002Fli>\n\u003Cli>Customers stay on your site during checkout (embedded PayPal experience)\u003C\u002Fli>\n\u003Cli>SSL\u002FHTTPS automatically enforced for payment pages\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Seamless Integration\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>PayPal button appears automatically in your existing booking forms\u003C\u002Fli>\n\u003Cli>Customers complete payment without leaving your website\u003C\u002Fli>\n\u003Cli>Works with all Bookster features (multiple services, staff selection, custom fields)\u003C\u002Fli>\n\u003C\u002Ful>\n\u003Ch3>Professional Customer Experience\u003C\u002Fh3>\n\u003Cul>\n\u003Cli>Instant payment confirmation emails sent automatically\u003C\u002Fli>\n\u003Cli>Customers receive PayPal receipt plus your booking confirmation\u003C\u002Fli>\n\u003Cli>Clear payment status shown in customer dashboard\u003C\u002Fli>\n\u003C\u002Ful>\n","Accept PayPal online payments at Bookster checkout",1680,"2026-03-09T17:58:00.000Z","6.2",[114,20,55,115,116],"appointments","payments","paypal","https:\u002F\u002Fwpbookster.com\u002F","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fbookster-paypal.3.0.0.zip","2026-04-06T09:54:40.288Z",{"slug":121,"name":122,"version":123,"author":124,"author_profile":125,"description":126,"short_description":127,"active_installs":128,"downloaded":129,"rating":27,"num_ratings":27,"last_updated":130,"tested_up_to":131,"requires_at_least":112,"requires_php":77,"tags":132,"homepage":137,"download_link":138,"security_score":139,"vuln_count":27,"unpatched_count":27,"last_vuln_date":28,"fetched_at":29},"flip-for-business","Flip For Business","1.0.2","Flip for Business","https:\u002F\u002Fprofiles.wordpress.org\u002Fflipforbusiness\u002F","\u003Cp>Flip for Business is a robust plugin that integrates Flip’s secure and efficient payment processing directly into your WordPress e-commerce site. With this plugin, you can offer your customers a smooth, reliable payment experience without ever leaving your store.\u003C\u002Fp>\n\u003Cp>Key Features:\u003C\u002Fp>\n\u003Cul>\n\u003Cli>Seamless integration with WooCommerce\u003C\u002Fli>\n\u003Cli>Support for various payment methods including bank transfers and e-wallets\u003C\u002Fli>\n\u003Cli>Real-time payment status updates\u003C\u002Fli>\n\u003Cli>Customizable payment interface\u003C\u002Fli>\n\u003Cli>Secure transaction processing\u003C\u002Fli>\n\u003Cli>Support for both Test Mode and Live Mode environments\u003C\u002Fli>\n\u003C\u002Ful>\n","Flip for Business is a robust plugin that integrates Flip's secure and efficient payment processing directly into your WordPress e-commerce site.",20,1103,"2025-05-14T05:28:00.000Z","9.1",[133,134,135,136,21],"flip","flip-woocommerce","flip-checkout","flip-id","https:\u002F\u002Fgitlab.com\u002Fflip-dev\u002Fflip-for-business","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fflip-for-business.1.0.2.zip",92,{"attackSurface":141,"codeSignals":190,"taintFlows":222,"riskAssessment":257,"analyzedAt":275},{"hooks":142,"ajaxHandlers":179,"restRoutes":187,"shortcodes":188,"cronEvents":189,"entryPointCount":61,"unprotectedCount":61},[143,149,153,157,161,165,168,172,176],{"type":144,"name":145,"callback":146,"file":147,"line":148},"action","woocommerce_blocks_checkout_block_registration","closure","syspay-payment.php",51,{"type":150,"name":151,"callback":146,"file":147,"line":152},"filter","wc_order_statuses",119,{"type":150,"name":154,"callback":155,"file":147,"line":156},"woocommerce_payment_gateways","syspay_add_gateway_class",131,{"type":144,"name":158,"callback":159,"file":147,"line":160},"init","syspay_register_order_statuses",132,{"type":144,"name":162,"callback":163,"file":147,"line":164},"plugins_loaded","syspay_init_gateway_class",133,{"type":144,"name":166,"callback":146,"file":147,"line":167},"before_woocommerce_init",136,{"type":144,"name":169,"callback":170,"file":147,"line":171},"wp_enqueue_scripts","payment_scripts",196,{"type":144,"name":173,"callback":174,"priority":11,"file":147,"line":175},"woocommerce_store_api_checkout_update_order_from_request","block_request",197,{"type":150,"name":177,"callback":146,"priority":11,"file":147,"line":178},"script_loader_tag",350,[180,184],{"action":181,"nopriv":182,"callback":181,"hasNonce":182,"hasCapCheck":182,"file":147,"line":183},"save_device_parameter",false,75,{"action":181,"nopriv":185,"callback":181,"hasNonce":182,"hasCapCheck":182,"file":147,"line":186},true,76,[],[],[],{"dangerousFunctions":191,"sqlUsage":192,"outputEscaping":205,"fileOperations":14,"externalRequests":27,"nonceChecks":27,"capabilityChecks":27,"bundledLibraries":221},[],{"prepared":61,"raw":74,"locations":193},[194,198,201],{"file":195,"line":196,"context":197},"includes\\class-syspay-install.php",21,"$wpdb->get_var() with variable interpolation",{"file":195,"line":199,"context":200},57,"$wpdb->query() with variable interpolation",{"file":202,"line":203,"context":204},"src\\Model\\UserTokenModel.php",95,"$wpdb->get_results() with variable interpolation",{"escaped":206,"rawEcho":207,"locations":208},9,6,[209,212,215,217,218,220],{"file":147,"line":210,"context":211},301,"raw output",{"file":213,"line":214,"context":211},"templates\\checkout\\save-cart.php",25,{"file":213,"line":216,"context":211},27,{"file":213,"line":216,"context":211},{"file":213,"line":219,"context":211},31,{"file":213,"line":47,"context":211},[],[223,241,249],{"entryPoint":224,"graph":225,"unsanitizedCount":14,"severity":240},"syspay_init_gateway_class (syspay-payment.php:143)",{"nodes":226,"edges":238},[227,232],{"id":228,"type":229,"label":230,"file":147,"line":231},"n0","source","$_GET",534,{"id":233,"type":234,"label":235,"file":147,"line":236,"wp_function":237},"n1","sink","wp_redirect() [Open Redirect]",544,"wp_redirect",[239],{"from":228,"to":233,"sanitized":182},"medium",{"entryPoint":242,"graph":243,"unsanitizedCount":14,"severity":240},"webhook_return (syspay-payment.php:523)",{"nodes":244,"edges":247},[245,246],{"id":228,"type":229,"label":230,"file":147,"line":231},{"id":233,"type":234,"label":235,"file":147,"line":236,"wp_function":237},[248],{"from":228,"to":233,"sanitized":182},{"entryPoint":250,"graph":251,"unsanitizedCount":14,"severity":240},"\u003Csyspay-payment> (syspay-payment.php:0)",{"nodes":252,"edges":255},[253,254],{"id":228,"type":229,"label":230,"file":147,"line":231},{"id":233,"type":234,"label":235,"file":147,"line":236,"wp_function":237},[256],{"from":228,"to":233,"sanitized":182},{"summary":258,"deductions":259},"The syspay-for-woocommerce v2.2.5 plugin presents several security concerns despite a clean vulnerability history. The most significant issue lies in its attack surface, with two AJAX handlers identified, neither of which have authentication checks. This means any unauthenticated user can trigger these actions, potentially leading to unintended consequences or exploitation if the underlying logic is vulnerable.\n\nWhile the static analysis did not reveal critical or high severity taint flows, it did flag that all three analyzed flows had unsanitized paths. Furthermore, a substantial portion of SQL queries (60%) are not using prepared statements, increasing the risk of SQL injection vulnerabilities. The lack of nonce checks on AJAX handlers is a direct invitation for Cross-Site Request Forgery (CSRF) attacks. The fact that there are no recorded CVEs is a positive sign, suggesting a general lack of discovered vulnerabilities in the past. However, the current code analysis reveals significant weaknesses that could be exploited, making the lack of past CVEs potentially due to a lack of thorough auditing or a recent shift in the plugin's codebase.\n\nIn conclusion, while the plugin has no known historical vulnerabilities, the current version exhibits critical security flaws. The unprotected AJAX endpoints, unsanitized taint flows, and reliance on unprepared SQL statements represent a high-risk profile. The absence of nonce and capability checks on critical entry points amplifies these risks. This plugin requires immediate attention and remediation to secure its attack surface and sanitize data processing.",[260,262,265,267,270,273],{"reason":261,"points":11},"AJAX handlers without authentication checks",{"reason":263,"points":264},"Unsanitized paths in taint analysis flows",8,{"reason":266,"points":207},"SQL queries not using prepared statements",{"reason":268,"points":269},"Lack of nonce checks on AJAX handlers",7,{"reason":271,"points":272},"Lack of capability checks on entry points",5,{"reason":274,"points":74},"Unescaped output detected","2026-03-17T00:09:05.828Z",{"wat":277,"direct":283},{"assetPaths":278,"generatorPatterns":280,"scriptPaths":281,"versionParams":282},[279],"\u002Fwp-content\u002Fplugins\u002Fsyspay-for-woocommerce\u002Fassets\u002Fjs\u002Fcheckout\u002Fblock.js",[],[279],[],{"cssClasses":284,"htmlComments":285,"htmlAttributes":286,"restEndpoints":287,"jsGlobals":290,"shortcodeOutput":292},[],[],[],[288,289],"\u002Fwp-json\u002Fsyspay\u002Fv1\u002Fwebhook","\u002Fwp-json\u002Fsyspay\u002Fv1\u002Fwebhook-ems",[291],"syspay_params",[],{"error":185,"url":294,"statusCode":295,"statusMessage":296,"message":296},"http:\u002F\u002Flocalhost\u002Fapi\u002Fplugins\u002Fsyspay-for-woocommerce\u002Fbundle",404,"no bundle for this plugin yet",{"slug":4,"current_version":6,"total_versions":269,"versions":298},[299,304,311,318,325,332,339],{"version":6,"download_url":26,"svn_tag_url":300,"released_at":28,"has_diff":182,"diff_files_changed":301,"diff_lines":28,"trac_diff_url":302,"vulnerabilities":303,"is_current":185},"https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F2.2.5\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.4&new_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.5",[],{"version":305,"download_url":306,"svn_tag_url":307,"released_at":28,"has_diff":182,"diff_files_changed":308,"diff_lines":28,"trac_diff_url":309,"vulnerabilities":310,"is_current":182},"2.2.4","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.2.2.4.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F2.2.4\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.3&new_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.4",[],{"version":312,"download_url":313,"svn_tag_url":314,"released_at":28,"has_diff":182,"diff_files_changed":315,"diff_lines":28,"trac_diff_url":316,"vulnerabilities":317,"is_current":182},"2.2.3","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.2.2.3.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F2.2.3\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.2&new_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.3",[],{"version":319,"download_url":320,"svn_tag_url":321,"released_at":28,"has_diff":182,"diff_files_changed":322,"diff_lines":28,"trac_diff_url":323,"vulnerabilities":324,"is_current":182},"2.2.2","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.2.2.2.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F2.2.2\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.1&new_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.2",[],{"version":326,"download_url":327,"svn_tag_url":328,"released_at":28,"has_diff":182,"diff_files_changed":329,"diff_lines":28,"trac_diff_url":330,"vulnerabilities":331,"is_current":182},"2.2.1","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.2.2.1.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F2.2.1\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsyspay-for-woocommerce%2Ftags%2F1.68&new_path=%2Fsyspay-for-woocommerce%2Ftags%2F2.2.1",[],{"version":333,"download_url":334,"svn_tag_url":335,"released_at":28,"has_diff":182,"diff_files_changed":336,"diff_lines":28,"trac_diff_url":337,"vulnerabilities":338,"is_current":182},"1.68","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.1.68.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F1.68\u002F",[],"https:\u002F\u002Fplugins.trac.wordpress.org\u002Fchangeset?old_path=%2Fsyspay-for-woocommerce%2Ftags%2F1.58&new_path=%2Fsyspay-for-woocommerce%2Ftags%2F1.68",[],{"version":340,"download_url":341,"svn_tag_url":342,"released_at":28,"has_diff":182,"diff_files_changed":343,"diff_lines":28,"trac_diff_url":28,"vulnerabilities":344,"is_current":182},"1.58","https:\u002F\u002Fdownloads.wordpress.org\u002Fplugin\u002Fsyspay-for-woocommerce.1.58.zip","https:\u002F\u002Fplugins.svn.wordpress.org\u002Fsyspay-for-woocommerce\u002Ftags\u002F1.58\u002F",[],[]]