Payment gateway for WooCommerce – Woo Alipay Security & Risk Analysis

wordpress.org/plugins/woo-alipay

Alipay China payment gateway for WooCommerce.

50 active installs v1.1.3 PHP 7.0+ WP 4.9.5+ Updated Apr 12, 2020
alibabaalipaypayment-gatewaypayments%e6%94%af%e4%bb%98%e5%ae%9d
85
A · Safe
CVEs total0
Unpatched0
Last CVENever
Safety Verdict

Is Payment gateway for WooCommerce – Woo Alipay Safe to Use in 2026?

Generally Safe

Score 85/100

Payment gateway for WooCommerce – Woo Alipay has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 5yr ago
Risk Assessment

The "woo-alipay" plugin v1.1.3 presents a generally strong security posture based on the provided static analysis. The plugin demonstrates good security practices by utilizing prepared statements for all SQL queries and having a high percentage of properly escaped output. Crucially, all identified entry points, including the single AJAX handler, appear to have authorization checks in place, and there are no known vulnerabilities or critical taint flows recorded in its history. The absence of dangerous functions, file operations, and external HTTP requests further contributes to its secure foundation.

Key Concerns

  • No capability checks found
  • No nonce check on AJAX handler
Vulnerabilities
None known

Payment gateway for WooCommerce – Woo Alipay Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

Payment gateway for WooCommerce – Woo Alipay Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
2 prepared
Unescaped Output
5
29 escaped
Nonce Checks
1
Capability Checks
0
File Operations
0
External Requests
0
Bundled Libraries
0

SQL Query Safety

100% prepared2 total queries

Output Escaping

85% escaped34 total outputs
Attack Surface

Payment gateway for WooCommerce – Woo Alipay Attack Surface

Entry Points1
Unprotected0

AJAX Handlers 1

authwp_ajax_woo_alipay_test_connectioninc\class-wc-alipay.php:64
WordPress Hooks 17
actionwoocommerce_api_wc_alipayinc\class-wc-alipay.php:70
actionwoocommerce_create_refundinc\class-wc-alipay.php:72
actionwoocommerce_receipt_alipayinc\class-wc-alipay.php:74
filtersanitize_userinc\class-wc-alipay.php:77
actionadmin_noticesinc\class-wc-alipay.php:215
filterwoocommerce_valid_order_statuses_for_paymentinc\class-wc-alipay.php:372
filterwoocommerce_valid_order_statuses_for_paymentinc\class-wc-alipay.php:392
actionwooalipay_orphan_transaction_notificationinc\class-wc-email-alipay-orphan-transaction.php:24
filterwcml_emails_options_to_translateinc\class-wc-email-alipay-orphan-transaction.php:27
filterwcml_emails_section_name_to_translateinc\class-wc-email-alipay-orphan-transaction.php:28
actioninitinc\class-woo-alipay.php:17
actionwp_enqueue_scriptsinc\class-woo-alipay.php:19
actionadmin_enqueue_scriptsinc\class-woo-alipay.php:21
filterwoocommerce_payment_gatewaysinc\class-woo-alipay.php:24
filterwoocommerce_get_order_item_totalsinc\class-woo-alipay.php:28
filterwoocommerce_email_classesinc\class-woo-alipay.php:30
actionplugins_loadedwoo-alipay.php:69
Maintenance & Trust

Payment gateway for WooCommerce – Woo Alipay Maintenance & Trust

Maintenance Signals

WordPress version tested5.4.19
Last updatedApr 12, 2020
PHP min version7.0
Downloads6K

Community Trust

Rating0/100
Number of ratings0
Active installs50
Developer Profile

Payment gateway for WooCommerce – Woo Alipay Developer Profile

Alexandre Froger

11 plugins · 8K total installs

71
trust score
Avg Security Score
88/100
Avg Patch Time
110 days
View full developer profile
Detection Fingerprints

How We Detect Payment gateway for WooCommerce – Woo Alipay

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-alipay/css/main.css/wp-content/plugins/woo-alipay/css/admin/main.css/wp-content/plugins/woo-alipay/js/admin/main.js
Script Paths
/wp-content/plugins/woo-alipay/js/admin/main.js
Version Parameters
woo-alipay/css/main.css?ver=woo-alipay/css/admin/main.css?ver=woo-alipay/js/admin/main.js?ver=

HTML / DOM Fingerprints

CSS Classes
woo-alipay-checkout-formwoo-alipay-account-formwoo-alipay-gateway-form
HTML Comments
<!-- Default Alipay Payment Gateway Settings --><!-- Alipay Payment Gateway Settings -->
Data Attributes
data-alipay-returndata-alipay-cancel
JS Globals
WooAlipay
REST Endpoints
/wc-api/WC_Alipay/
FAQ

Frequently Asked Questions about Payment gateway for WooCommerce – Woo Alipay