Top Payments WordPress Plugins
92 indexed plugins
Plugins
92
Active Installs
2m+
Average Score
49
Audited
92
Top Scores
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #1 | Visa Acceptance Solutions | 100 | 0 | 10k+ | No open findings | |||
| #2 | Mastercard Merchant Cloud | 100 | 0 | 900 | No open findings | |||
| #3 | Helcim for WooCommerce | 99 | 4 | 700 | Discouraged text-domain loading | |||
| #4 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | Non-prefixed constant | ||
| #5 | Payments via Teya Payments for Woocommerce | 98 | 1 | 4 | 400 | Mixed line endings | ||
| #6 | Authorize.net Payments for WooCommerce | 96 | 11 | 1k+ | Non-prefixed constant | |||
| #7 | PayHere Payment Gateway | 95 | 6 | 8 | 2k+ | Non-prefixed class | ||
| #8 | Airwallex Online Payments Gateway | 94 | 2 | 2 | 5k+ | Nonce verification recommended | ||
| #9 | Novalnet Payment Gateway for WooCommerce | 94 | 4 | 58 | 1k+ | Non-prefixed class | ||
| #10 | Viva.com | Smart Checkout for WooCommerce | 91 | 30 | 6k+ | Direct Query | |||
| #11 | Helio Pay (Accept 1-click crypto payments #USDC #SOL #BTC #ETH) | 91 | 8 | 11 | 500 | Missing direct file access protection | ||
| #12 | Payment Forms for Paystack | 90 | 494 | 23 | 2k+ | Text Domain Mismatch | ||
| #13 | PayPro Gateways – WooCommerce | 90 | 3 | 13 | 400 | Non-prefixed hook name | ||
| #14 | Invoice Payment Gateway for WooCommerce | 87 | 5 | 4 | 2k+ | Output is not escaped | ||
| #15 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | Direct Query | ||
| #16 | Getnet Argentina para WooCommerce | 86 | 14 | 9 | 400 | Text Domain Mismatch | ||
| #17 | MyCryptoCheckout – Bitcoin, Ethereum, and 100+ altcoins for WooCommerce | 85 | 9 | 7 | 8k+ | Missing Translators Comment | ||
| #18 | PayPal Payment Buttons | 85 | 232 | 51 | 500 | Text Domain Mismatch | ||
| #19 | BinancePay Checkout for WooCommerce | 84 | 5 | 14 | 700 | Input is not validated | ||
| #20 | GoFundMe Pro | Nonprofit Donation Forms | 84 | 7 | 5 | 400 | trademarked term | ||
| #21 | Web3 Crypto Payments by DePay for WooCommerce | 78 | 6 | 101 | 1k+ | Direct Query | ||
| #22 | Pelecard Gateway | 76 | 295 | 54 | 300 | Text Domain Mismatch | ||
| #23 | RiskPay Gateway: USDC Payouts for WooCommerce | 72 | 20 | 2 | 600 | Output is not escaped | ||
| #24 | Payment Gateway for PhonePe and for Woocommerce | 69 | 15 | 14 | 900 | Non Singular String Literal Domain | ||
| #25 | Zapper Payments | 69 | 11 | 11 | 600 | Output is not escaped | ||
| #26 | Stitch Express | 67 | 12 | 6 | 500 | Exception output is not escaped | ||
| #27 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | Text Domain Mismatch | ||
| #28 | Subscriptions for WooCommerce with Stripe Recurring Payments | 64 | 528 | 1k+ | Non-prefixed global variable | |||
| #29 | StoreEngine — Complete eCommerce Solution with Memberships, Licensing, Affiliates & More | 62 | 13 | 47 | 600 | Database parameter is not escaped | ||
| #30 | GetPaid Stripe Payments | 61 | 226 | 43 | 2k+ | Text Domain Mismatch | ||
| #31 | Maya Business Plugin | 56 | 9 | 39 | 500 | Input is not validated | ||
| #32 | Mintpay | 51 | 14 | 35 | 600 | Nonce verification recommended | ||
| #33 | Razorpay Payment Links for WooCommerce | 50 | 16 | 34 | 900 | Nonce verification recommended | ||
| #34 | Instamojo for WooCommerce | 48 | 72 | 44 | 4k+ | Text Domain Mismatch | ||
| #35 | Razorpay Subscriptions for WooCommerce | 44 | 28 | 35 | 700 | Exception output is not escaped | ||
| #36 | Alma – Pay in installments or later for WooCommerce | 41 | 116 | 68 | 1k+ | Exception output is not escaped | ||
| #37 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | Output is not escaped | ||
| #38 | iCount Payment Gateway | 41 | 159 | 22 | 500 | Text Domain Mismatch | ||
| #39 | Quick Paypal Payments | 40 | 3 | 299 | 1k+ | Non-prefixed function | ||
| #40 | Mollie Forms | 39 | 31 | 647 | 3k+ | Request data is not unslashed | ||
| #41 | Paystack Add-On for Gravity Forms | 39 | 96 | 31 | 400 | Text Domain Mismatch | ||
| #42 | Amazon Pay for WooCommerce | 38 | 30 | 117 | 10k+ | Non-prefixed class | ||
| #43 | Cecabank WooCommerce Plugin | 38 | 63 | 32 | 3k+ | Text Domain Mismatch | ||
| #44 | GoDaddy Payments for WooCommerce | 38 | 58 | 65 | 2k+ | Output is not escaped | ||
| #45 | Payments via PayMongo for WooCommerce | 38 | 46 | 78 | 1k+ | Nonce verification recommended | ||
| #46 | imoje | 37 | 68 | 67 | 2k+ | Output is not escaped | ||
| #47 | Sezzle Woocommerce Payment | 37 | 108 | 105 | 1k+ | Text Domain Mismatch | ||
| #48 | Monobank WP Payment | 37 | 78 | 41 | 1k+ | Text Domain Mismatch | ||
| #49 | WooCommerce PayPal Payments | 36 | 200 | 113 | 800k+ | Exception output is not escaped | ||
| #50 | SumUp Payment Gateway For WooCommerce | 35 | 29 | 62 | 10k+ | Nonce verification recommended |
