WP-Safety

LayUp payment gateway plugin for woocommerce Security & Risk Analysis

wordpress.org/plugins/woo-layup-payment-gateway

The Official LayUp payment gateway plugin for woocommerce.

60 active installs v1.11.4 PHP 5.6+ WP 4.6+ Updated Nov 27, 2025
layuppayment-gatewaysouth-africawoocommerce
100
A · Safe
CVEs total0
Unpatched0
Last CVENever
Plugin page Download
Safety Verdict

Is LayUp payment gateway plugin for woocommerce Safe to Use in 2026?

Generally Safe

Score 100/100

LayUp payment gateway plugin for woocommerce has no known CVEs and is actively maintained. It's a solid choice for most WordPress installations.

No known CVEs Updated 4mo ago
Risk Assessment

The "woo-layup-payment-gateway" v1.11.4 plugin exhibits a mixed security posture. On the positive side, the code demonstrates good practices by exclusively using prepared statements for SQL queries and achieving a high percentage of output escaping. The absence of known CVEs and recorded vulnerabilities in its history is a strong indicator of a well-maintained and secure codebase. However, the static analysis reveals significant concerns regarding the attack surface. Specifically, the plugin exposes a REST API route without proper permission checks, creating a direct entry point that could be exploited by unauthenticated users. Additionally, the taint analysis found two flows with unsanitized paths, which, while not classified as critical or high severity in this analysis, represent potential avenues for unexpected behavior or data manipulation if further exploited.

Key Concerns

  • REST API route without permission callbacks
  • Flows with unsanitized paths found
  • No nonce checks on AJAX handlers
Vulnerabilities
None known

LayUp payment gateway plugin for woocommerce Security Vulnerabilities

No known vulnerabilities — this is a good sign.
Code Analysis
Analyzed Mar 16, 2026

LayUp payment gateway plugin for woocommerce Code Analysis

Dangerous Functions
0
Raw SQL Queries
0
0 prepared
Unescaped Output
9
62 escaped
Nonce Checks
0
Capability Checks
1
File Operations
1
External Requests
8
Bundled Libraries
0

Output Escaping

87% escaped71 total outputs
Data Flows
2 unsanitized

Data Flow Analysis

3 flows2 with unsanitized paths
layup_callback (includes\class-layup-wc-gateway.php:982)
Source (user input) Sink (dangerous op) Sanitizer Transform Unsanitized Sanitized
Attack Surface
1 unprotected

LayUp payment gateway plugin for woocommerce Attack Surface

Entry Points2
Unprotected1

REST API Routes 1

GET/wp-json/layup/v1/is-liveincludes\layup-is-live-check.php:30

Shortcodes 1

[layup] includes\layup-payment-plan-shortcode.php:6
WordPress Hooks 52
actionwoocommerce_api_wc_layup_gatewayincludes\class-layup-wc-gateway.php:120
actionadmin_noticesincludes\class-layup-wc-gateway.php:125
actionlayup_order_checkincludes\layup-cron.php:3
actionlayup_canceled_order_checkincludes\layup-cron.php:166
actionlayup_api_key_checkincludes\layup-cron.php:351
actionrest_api_initincludes\layup-is-live-check.php:29
actioninitincludes\layup-payment-plan-tab.php:15
filterquery_varsincludes\layup-payment-plan-tab.php:27
filterwoocommerce_account_menu_itemsincludes\layup-payment-plan-tab.php:39
actionwoocommerce_account_payment-plans_endpointincludes\layup-payment-plan-tab.php:49
actionwp_enqueue_scriptsincludes\layup-wc-functions.php:2
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:355
actionadmin_footerincludes\layup-wc-functions.php:357
actionwoocommerce_before_add_to_cart_buttonincludes\layup-wc-functions.php:472
filterwoocommerce_add_to_cart_validationincludes\layup-wc-functions.php:496
filterwoocommerce_add_cart_item_dataincludes\layup-wc-functions.php:516
filterwoocommerce_get_cart_item_from_sessionincludes\layup-wc-functions.php:536
filterwoocommerce_get_item_dataincludes\layup-wc-functions.php:562
filterwoocommerce_order_item_productincludes\layup-wc-functions.php:582
filterwoocommerce_email_order_meta_fieldsincludes\layup-wc-functions.php:597
actionwoocommerce_checkout_create_order_line_itemincludes\layup-wc-functions.php:619
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:646
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:673
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:710
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:738
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:765
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:792
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:819
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:846
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:873
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:900
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:933
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:957
actionwoocommerce_product_options_inventory_product_dataincludes\layup-wc-functions.php:987
actionwoocommerce_process_product_metaincludes\layup-wc-functions.php:1079
actionwoocommerce_after_add_to_cart_formincludes\layup-wc-functions.php:1655
actionwoocommerce_after_shop_loop_item_titleincludes\layup-wc-functions.php:1790
actionadmin_noticesincludes\layup-wc-functions.php:1836
filtermanage_product_posts_columnsincludes\layup-wc-functions.php:1841
actionmanage_posts_custom_columnincludes\layup-wc-functions.php:1856
actionquick_edit_custom_boxincludes\layup-wc-functions.php:1876
actionsave_postincludes\layup-wc-functions.php:1907
actionadmin_print_footer_scripts-edit.phpincludes\layup-wc-functions.php:2019
actionwoocommerce_product_bulk_edit_startincludes\layup-wc-functions.php:2021
actionwoocommerce_product_bulk_edit_saveincludes\layup-wc-functions.php:2037
actionwoocommerce_after_cart_totalsincludes\layup-wc-functions.php:2469
actionadmin_noticesincludes\layup-wc-functions.php:2485
filterwoocommerce_payment_gatewayslayup-gateway.php:49
actionplugins_loadedlayup-gateway.php:66
actionbefore_woocommerce_initlayup-gateway.php:156
actionwoocommerce_blocks_loadedlayup-gateway.php:159
actionwoocommerce_blocks_payment_method_type_registrationlayup-gateway.php:170

Scheduled Events 3

layup_canceled_order_check
layup_order_check
layup_api_key_check
Maintenance & Trust

LayUp payment gateway plugin for woocommerce Maintenance & Trust

Maintenance Signals

WordPress version tested6.3.8
Last updatedNov 27, 2025
PHP min version5.6
Downloads8K

Community Trust

Rating0/100
Number of ratings0
Active installs60
Alternatives

LayUp payment gateway plugin for woocommerce Alternatives

PayJustNow for WooCommerce

PayJustNow for WooCommerce

payjustnow-for-woocommerce

A
100

Buy now, pay later, interest-free! PayJustNow splits your purchase into 3 easy, zero-interest instalments in South Africa.

900 No CVEs
Bob Pay

Bob Pay

bob-pay

A
100

A WooCommerce plugin that enables you to use Bob Pay as a payment method.

200 No CVEs
Float Payment Gateway

Float Payment Gateway

float-gateway

A
99

Take credit card payments on your store using the Float API.

100 1 CVE
SmartPayLive

SmartPayLive

smartpaylive

A
100

This is the official WooCommerce extension to receive payments using the SmartPayLive payment gateway.

0 No CVEs
Paystack WooCommerce Payment Gateway

Paystack WooCommerce Payment Gateway

woo-paystack

A
100

Paystack for WooCommerce allows your WooCommerce store to accept secure payments from multiple local and global payment channels.

30K No CVEs
Developer Profile

LayUp payment gateway plugin for woocommerce Developer Profile

Cameron Morgan

1 plugin · 60 total installs

94
trust score
Avg Security Score
100/100
Avg Patch Time
30 days
View full developer profile
Detection Fingerprints

How We Detect LayUp payment gateway plugin for woocommerce

Patterns used to identify this plugin on WordPress sites during automated security audits and web crawling.

Asset Fingerprints

Asset Paths
/wp-content/plugins/woo-layup-payment-gateway/css/payment-plans.css
Version Parameters
woo-layup-payment-gateway/css/payment-plans.css?ver=1.0.0

HTML / DOM Fingerprints

CSS Classes
layup-payment-planspp-entrypp-entry-titlepp-contentbtn-layup
Data Attributes
layup_order_idlayup_order_ref
Shortcode Output
<div class="layup-payment-plans"><article class="pp-entry"><h2 class="pp-entry-title"><p class="pp-content"><strong>Outstanding:</strong>
FAQ

Frequently Asked Questions about LayUp payment gateway plugin for woocommerce