Virtuaria Payments by Payco Security & Risk Analysis

wordpress.org/plugins/virtuaria-payments-by-payco

Permite pagamentos via Pix com confirmação automática na sua loja Woocommerce.

0 active installs v1.0.0 PHP 7.4+ WP 4.7+ Updated Unknown
cartaopagamentospaycopix
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Virtuaria Payments by Payco Safe to Use in 2026?

Generally Safe

Score 100/100

Virtuaria Payments by Payco has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs
Risk Assessment

The virtuaria-payments-by-payco plugin version 1.0.0 exhibits a generally strong security posture based on the provided static analysis. The plugin demonstrates good practices by implementing robust checks for all identified entry points, including AJAX handlers and REST API routes. The absence of unpatched vulnerabilities in its history is a significant positive indicator of the development team's commitment to security. Furthermore, the code extensively uses prepared statements for SQL queries and properly escapes most of its output, indicating a conscious effort to prevent common web vulnerabilities like SQL injection and cross-site scripting.

Key Concerns

  • Flows with unsanitized paths found in taint analysis
  • No capability checks implemented
  • Two unsanitized path flows identified
Vulnerabilities
None known

Virtuaria Payments by Payco Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 17, 2026

Virtuaria Payments by Payco Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
2
186 escaped
Nonce Checks
9
Capability Checks
0
File Operations
0
External Requests
7
Bundled Libraries
0

Output Escaping

99% escaped188 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

5 flows2 with unsanitized paths
new_charge_credit (includes\class-virtuaria-payments-payco-api.php:312)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface

Virtuaria Payments by Payco Attack Surface

Entry Points5
Unprotected0

AJAX Handlers 4

authwp_ajax_fetch_payment_orderincludes\class-virtuaria-payments-payco-events.php:27
noprivwp_ajax_fetch_payment_orderincludes\class-virtuaria-payments-payco-events.php:28
authwp_ajax_payments_payco_3ds_order_totalincludes\class-virtuaria-payments-payco-events.php:37
noprivwp_ajax_virtuaria_payments_payco_3ds_order_totalincludes\class-virtuaria-payments-payco-events.php:41

REST API Routes 1

GET/wp-json/virtuaria_payments/v1/ordersincludes\class-virtuaria-payments-payco-handle-notifications.php:60
WordPress Hooks 42
actionpayco_pix_check_paymentincludes\class-virtuaria-payments-payco-events.php:29
actionpayco_process_update_order_statusincludes\class-virtuaria-payments-payco-events.php:30
filtercron_schedulesincludes\class-virtuaria-payments-payco-events.php:46
actionvirtuaria_payments_payco_pix_confirm_paymentincludes\class-virtuaria-payments-payco-events.php:47
actionwp_enqueue_scriptsincludes\class-virtuaria-payments-payco-gateway-credit.php:169
filterwoocommerce_billing_fieldsincludes\class-virtuaria-payments-payco-gateway-credit.php:183
actionwoocommerce_process_shop_order_metaincludes\class-virtuaria-payments-payco-gateway-credit.php:206
actionwoocommerce_email_after_order_tableincludes\class-virtuaria-payments-payco-gateway-pix.php:150
actionwp_enqueue_scriptsincludes\class-virtuaria-payments-payco-gateway-pix.php:156
actionwoocommerce_process_shop_order_metaincludes\class-virtuaria-payments-payco-gateway-pix.php:166
filtervirtuaria_payments_payco_disable_discountincludes\class-virtuaria-payments-payco-gateway-pix.php:171
filterwoocommerce_gateway_titleincludes\class-virtuaria-payments-payco-gateway-pix.php:177
actionafter_virtuaria_payments_payco_pix_validate_textincludes\class-virtuaria-payments-payco-gateway-pix.php:183
actionafter_virtuaria_payments_payco_pix_validate_textincludes\class-virtuaria-payments-payco-gateway-pix.php:187
actionwoocommerce_process_shop_order_metaincludes\class-virtuaria-payments-payco-gateway-pix.php:198
filterwoocommerce_new_order_note_dataincludes\class-virtuaria-payments-payco-gateway-pix.php:407
actionwoocommerce_email_after_order_tableincludes\class-virtuaria-payments-payco-gateway-ticket.php:141
filterwoocommerce_billing_fieldsincludes\class-virtuaria-payments-payco-gateway-ticket.php:148
actionwoocommerce_process_shop_order_metaincludes\class-virtuaria-payments-payco-gateway-ticket.php:159
actionpayco_ticket_check_paymentincludes\class-virtuaria-payments-payco-gateway-ticket.php:164
filtervirtuaria_payments_payco_disable_discountincludes\class-virtuaria-payments-payco-gateway-ticket.php:168
filterwoocommerce_gateway_titleincludes\class-virtuaria-payments-payco-gateway-ticket.php:174
filterwoocommerce_new_order_note_dataincludes\class-virtuaria-payments-payco-gateway-ticket.php:353
actionrest_api_initincludes\class-virtuaria-payments-payco-handle-notifications.php:51
actionwoocommerce_single_product_summaryincludes\class-virtuaria-payments-payco-product-installments.php:32
actionwoocommerce_after_shop_loop_item_titleincludes\class-virtuaria-payments-payco-product-installments.php:36
filterwoocommerce_available_variationincludes\class-virtuaria-payments-payco-product-installments.php:41
actionwp_enqueue_scriptsincludes\class-virtuaria-payments-payco-product-installments.php:47
actionadmin_menuincludes\class-virtuaria-payments-payco-settings.php:18
actionin_admin_footerincludes\class-virtuaria-payments-payco-settings.php:19
actionadmin_enqueue_scriptsincludes\class-virtuaria-payments-payco-settings.php:20
actionwp_enqueue_scriptsincludes\class-virtuaria-payments-payco-settings.php:21
actioninitincludes\class-virtuaria-payments-payco-settings.php:22
actionadmin_noticesincludes\class-virtuaria-payments-payco-settings.php:23
filtervirtuaria_payments_payco_iconincludes\class-virtuaria-payments-payco-settings.php:24
actionwoocommerce_email_after_order_tableincludes\traits\trait-virtuaria-payments-payco-common.php:225
actionadmin_noticesvirtuaria-payments-by-payco.php:55
actioninitvirtuaria-payments-by-payco.php:59
actionbefore_woocommerce_initvirtuaria-payments-by-payco.php:60
filterwoocommerce_payment_gatewaysvirtuaria-payments-by-payco.php:63
actionadmin_noticesvirtuaria-payments-by-payco.php:65
actionplugins_loadedvirtuaria-payments-by-payco.php:175

Scheduled Events 5

payco_pix_check_payment
virtuaria_payments_payco_pix_confirm_payment
payco_ticket_check_payment
payco_process_update_order_status
payco_process_update_order_status
Maintenance & Trust

Virtuaria Payments by Payco Maintenance & Trust

Maintenance Signals

WordPress version tested6.8.5
Last updatedUnknown
PHP min version7.4
Downloads378

Community Trust

Rating0/100
Number of ratings0
Active installs0
Developer Profile

Virtuaria Payments by Payco Developer Profile

Virtuaria

10 plugins · 2K total installs

91
trust score
Avg Security Score
95/100
Avg Patch Time
22 days
View full developer profile
Detection Fingerprints

How We Detect Virtuaria Payments by Payco

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/virtuaria-payments-by-payco/public/images/payco.png
Version Parameters
virtuaria-payments-by-payco/assets/css/payco.css?ver=virtuaria-payments-by-payco/assets/js/payco.js?ver=

HTML / DOM Fingerprints

CSS Classes
virtuaria-payments-payco-creditvirtuaria-payments-payco-pix
Data Attributes
data-payco-credit-installmentsdata-payco-credit-taxdata-payco-credit-min-installmentdata-payco-credit-fee-fromdata-payco-pix-enabled
JS Globals
Virtuaria_Payments_Payco_APIVirtuaria_Payments_Payco_Settings
FAQ

Frequently Asked Questions about Virtuaria Payments by Payco