Thanks Mail for Stripe Security & Risk Analysis

wordpress.org/plugins/thanks-mail-for-stripe

Automatically send thank-you emails when Stripe Payment Links purchases are completed. Supports Japanese and English with customizable templates.

0 active installs v1.1.0 PHP 7.4+ WP 5.0+ Updated Feb 20, 2026
emailnotificationspaymentstripewebhook
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Thanks Mail for Stripe Safe to Use in 2026?

Generally Safe

Score 100/100

Thanks Mail for Stripe has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 1mo ago
Risk Assessment

The "thanks-mail-for-stripe" plugin, v1.1.0, exhibits a strong security posture based on the provided static analysis. The absence of any identified dangerous functions, file operations, or external HTTP requests is highly commendable. Furthermore, the near-perfect output escaping and the significant proportion of SQL queries utilizing prepared statements indicate good development practices aimed at preventing common vulnerabilities like XSS and SQL injection. The plugin also demonstrates a minimal attack surface, with no registered AJAX handlers, REST API routes, shortcodes, or cron events that are exposed without proper authentication or permission checks.

Vulnerabilities
None known

Thanks Mail for Stripe Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Thanks Mail for Stripe Code Analysis

Dangerous Functions
0
Raw SQL Queries
2
4 prepared
Unescaped Output
0
101 escaped
Nonce Checks
0
Capability Checks
3
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

67% prepared6 total queries

Output Escaping

100% escaped101 total outputs
Attack Surface

Thanks Mail for Stripe Attack Surface

Entry Points0
Unprotected0
WordPress Hooks 4
actionadmin_menuthanks-mail-for-stripe.php:152
actionadmin_initthanks-mail-for-stripe.php:153
actionadmin_enqueue_scriptsthanks-mail-for-stripe.php:154
actionrest_api_initthanks-mail-for-stripe.php:159
Maintenance & Trust

Thanks Mail for Stripe Maintenance & Trust

Maintenance Signals

WordPress version tested6.9.4
Last updatedFeb 20, 2026
PHP min version7.4
Downloads158

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Thanks Mail for Stripe Developer Profile

rapls

2 plugins · 10 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect Thanks Mail for Stripe

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/thanks-mail-for-stripe/assets/css/admin.css/wp-content/plugins/thanks-mail-for-stripe/assets/js/admin.js
Version Parameters
thanks-mail-for-stripe/assets/css/admin.css?ver=thanks-mail-for-stripe/assets/js/admin.js?ver=

HTML / DOM Fingerprints

CSS Classes
tmfs-admin-wrap
Data Attributes
data-tmfs-action
JS Globals
tmfs_admin_object
REST Endpoints
/wp-json/thanks-mail/v1/webhook
FAQ

Frequently Asked Questions about Thanks Mail for Stripe