Payments WordPress Plugins That Need Review
85 indexed plugins
Plugins
85
Active Installs
2m+
Average Score
46
Audited
85
Needs Review
| Rank | Plugin | Score | Errors | Warnings | Installs | Added | Updated | Top Issue |
|---|---|---|---|---|---|---|---|---|
| #51 | GoDaddy Payments for WooCommerce | 38 | 58 | 65 | 2k+ | Output is not escaped | ||
| #52 | imoje | 38 | 62 | 160 | 2k+ | Nonce verification recommended | ||
| #53 | Paystack Add-On for Gravity Forms | 39 | 96 | 31 | 400 | Text Domain Mismatch | ||
| #54 | Alma – Pay in installments or later for WooCommerce | 41 | 116 | 68 | 1k+ | Exception output is not escaped | ||
| #55 | iCount Payment Gateway | 41 | 153 | 22 | 500 | Text Domain Mismatch | ||
| #56 | Mollie Forms | 41 | 14 | 565 | 3k+ | Request data is not unslashed | ||
| #57 | SnapScan Payment Gateway | 41 | 33 | 30 | 700 | Output is not escaped | ||
| #58 | Razorpay Subscriptions for WooCommerce | 44 | 28 | 35 | 600 | Exception output is not escaped | ||
| #59 | Instamojo for WooCommerce | 48 | 72 | 44 | 5k+ | Text Domain Mismatch | ||
| #60 | Razorpay Payment Links for WooCommerce | 50 | 16 | 34 | 1k+ | Nonce verification recommended | ||
| #61 | Mintpay | 51 | 14 | 35 | 600 | Nonce verification recommended | ||
| #62 | Maya Business Plugin | 56 | 9 | 39 | 600 | Input is not validated | ||
| #63 | GetPaid Stripe Payments | 61 | 206 | 44 | 2k+ | Text Domain Mismatch | ||
| #64 | Dojo for WooCommerce | 65 | 71 | 13 | 800 | Text Domain Mismatch | ||
| #65 | Payment Gateway for PhonePe and for Woocommerce | 69 | 15 | 14 | 900 | Non Singular String Literal Domain | ||
| #66 | Zapper Payments | 69 | 11 | 11 | 600 | Output is not escaped | ||
| #67 | Stitch Express | 70 | 9 | 6 | 400 | Output is not escaped | ||
| #68 | RiskPay Gateway: USDC Payouts for WooCommerce | 72 | 20 | 2 | 600 | Output is not escaped | ||
| #69 | Pelecard Gateway | 76 | 295 | 54 | 400 | Text Domain Mismatch | ||
| #70 | Web3 Crypto Payments by DePay for WooCommerce | 78 | 6 | 101 | 1k+ | Direct Query | ||
| #71 | BinancePay Checkout for WooCommerce | 84 | 5 | 14 | 900 | Input is not validated | ||
| #72 | MyCryptoCheckout – Bitcoin, Ethereum, and 100+ altcoins for WooCommerce | 85 | 6 | 7 | 8k+ | Missing Translators Comment | ||
| #73 | Getnet Argentina para WooCommerce | 86 | 14 | 9 | 500 | Text Domain Mismatch | ||
| #74 | PayPal Enterprise Payments (formerly Braintree) for WooCommerce | 86 | 3 | 33 | 10k+ | Direct Query | ||
| #75 | Invoice Payment Gateway for WooCommerce | 87 | 5 | 4 | 2k+ | Output is not escaped | ||
| #76 | Payment Forms for Paystack | 90 | 494 | 23 | 3k+ | Text Domain Mismatch | ||
| #77 | Viva.com | Smart Checkout for WooCommerce | 90 | 1 | 30 | 6k+ | Direct Query | ||
| #78 | Helio Pay (Accept 1-click crypto payments #USDC #SOL #BTC #ETH) | 91 | 8 | 11 | 500 | Missing direct file access protection | ||
| #79 | Novalnet Payment Gateway for WooCommerce | 94 | 4 | 58 | 1k+ | Non-prefixed class | ||
| #80 | Airwallex Online Payments Gateway | 95 | 2 | 2 | 4k+ | Nonce verification recommended | ||
| #81 | PayHere Payment Gateway | 95 | 6 | 8 | 2k+ | Non-prefixed class | ||
| #82 | PayPro Gateways – WooCommerce | 97 | 2 | 8 | 400 | Non-prefixed hook name | ||
| #83 | Helcim for WooCommerce | 99 | 4 | 800 | Discouraged text-domain loading | |||
| #84 | Lemon Squeezy — Sell Digital Products, Subscriptions, and Licenses | 99 | 1 | 5 | 500 | Non-prefixed constant | ||
| #85 | Visa Acceptance Solutions | 100 | 0 | 10k+ | No open findings |
