Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments

Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments has one disclosed vulnerability in the WordSec catalog, all reported in 2026; it is fixed as of August 2026. Their average CVSS score is 5.3, and the most serious one scores 5.3 out of 10.

The most common weakness is Missing Authorization, behind 1 of the records (100%).

The one issue recorded for Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments has a vendor fix available, so running the current release closes it.

All of these findings were reported by Pedro Pinho. Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments is installed on roughly 800 WordPress sites, so each unpatched flaw has a wide blast radius. The current release is tested up to WordPress 7.0.4.

Strategic Overview

Avg CVSSMedium
5.3/ 10
Patch Coverage100%
Open

0

Fixed

1

Get automatic notifications for all Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments vulnerabilities before they are exploited.

Highest severity on recordCVSS 5.3CVE-2026-12966

Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments < 2.5.3 - Missing Authorization

Read the full analysis

Vulnerability Records

1 records
Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments banner
Latestv2.5.8

Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments

Digages

Author

Digages

5.0(10)
100/100
Last Updated
2026-08-06 (9d ago)
Active Installs
800+
Downloads
29,060
Requires WP
5.0+
Requires PHP
7.0+
Tested up to
WP 7.0.4
Created
2024-10-25 (2y ago)
Requires Plugins
woocommerce

Say goodbye to traditional payment gateways that require developers, API keys, and complex KYC processes. Direct Payments for WooCommerce makes it easy for WooCommerce store owners to accept payments directly through local and global methods with zero transaction fees. Set up Direct Payments for WooCommerce within minutes and give your customers the freedom to choose their preferred payment option. With Direct Payments for WooCommerce, you can accept payments via: Bank Transfers – International & Local Mobile Money – MTN MoMo, M-Pesa, Airtel, Vodafone, and many more Crypto Payments – BTC, ETH, USDT, SOL, BNB, ADA, MATIC, and many more Peer-to-Peer (P2P) Platforms – Zelle, Venmo, PayPal, GCash, Cash App, Apple Pay, Monzo, Google Pay, Payoneer, Skrill, Paytm, Monzo, Wise, and many more QR Codes Unlock all features with Pro Version Demo Direct Payments | Free vs PRO Why use Direct Payments for WooCommerce? Any Payment Method: Let your customers pay with their preferred options — bank transfers, mobile money, crypto or P2P platforms. Zero Transaction Fees: Keep 100% of your revenue with no hidden costs or fees. Fast Setup: Go from installation to receiving payments in minutes, with no KYC or API keys required. Secure & Reliable: Enjoy safe, encrypted transactions with payments processed directly through the preferred payment gateway. Unlimited Payment Methods [PRO]: Upgrade from the single payment method in the free version to unlimited payment methods with Pro, allowing you to offer more flexibility to your customers and boost sales. Geo-Currency: Improve checkout experience by automatically showing payment methods available in the customer’s location. Multiple Currencies [PRO]: Sell globally with multi-currency support, with exchange rates set automatically or updated manually for full control. Instant Payment Alert Notifications: Receive alerts to your Telegram and email for every payment, enabling you to manage transactions in real time. Simple Dashboard Management: Confirm or cancel payments directly from your WordPress dashboard. Customizable Payment Popups [PRO]: Customize the payment process to match your brand’s colors and style. Email Payment Confirmation [PRO]: Easily confirm or cancel payments via email without logging in. Translation Ready: Fully compatible with translation plugins like Loco Translate, making it easy to use in any language. Premium Support [PRO]: Create support tickets and get fast, prioritized assistance to resolve any issues quickly. 📄 Quick Guides How to Add Zelle Payment Option to WooCommerce How to Accept QR Code Payments on WooCommerce How to Accept Crypto Payments on Woocommerce How to Accept Peer-to-Peer (P2P) Payments on WooCommerce How to Accept Mobile Money Payments on Woocommerce How to Accept Bank Transfer Payments on WooCommerce Read more on our documentation What’s Next?: If you like this plugin, then consider checking out our other plugins: Direct Payments for WooCommerce – Bank Transfer, Mobile Money, Crypto and Peer-to-Peer (P2P) Payments Direct Payments WP – Receive Payments with Forms Direct Invoices – Invoicing & Payment Requests for WordPress Engraver for WooCommerce – Personalize and Customize WooCommerce Products APL – Auto-Pickup Locations for WooCommerce Digages Role Manager – User Roles & Permissions SVG Editor: Upload & Change Colors Digages Website Monitor Digages Restock Alert 2.5.8 Fixed: Minor bug fixes. 2.5.7 Added: Customer refund account details Added: Partial and full refund records Added: Refund reference number Added: Admin refund-proof upload Added: “Refund sent” customer email Added: Staff notes Added: Refund approval roles Added: Refund status timeline Added: Outstanding refund dashboard 2.5.6 Fixed: Minor bug fixes. Improved: Minor update. 2.5.5 Fixed: Minor bug fixes. Added: Customer Payment Center Added: A Direct Payments section under WooCommerce My Account where customers can: Added: View pending direct-payment orders Added: Reopen payment instructions Added: Change payment method before paying Added: Upload or replace proof Added: Enter a transaction reference Added: See confirmation status Added: Download a payment receipt Added: Contact the Admin about a payment 2.5.4 Added: Feature to customize customer payment method details. *Fixed: Admin email payment amount duplicate values 2.5.3 Security: Require WooCommerce order ownership or matching order key before payment confirmation, proof upload, email resend, and cancel/restore actions. Security: Removed logged-out access from admin order confirm/cancel/detail AJAX actions. Credit: Thanks to Pedro Pinho for reporting the authorization issue. 2.5.2 Improved: Minor update. 2.5.1 Improved: Minor update. 2.5.0 Improved: Minor update. 2.4.9.1 Improved: Minor update. 2.4.9 Improved: Minor update. 2.4.8 Improved: Minor update. 2.4.6 Improved: Minor update. 2.4.5 Improved: Minor update. 2.4.4 Added: Multiple admin email notification receivers. 2.4.3 Improved: Minor update. 2.4.2 Improved: Minor update. 2.4.1 Improved: Minor update. 2.4.0 Added: Workflow settings tab. Added: WadSow AI option to general settings. 2.3.6 Improved: Minor update. 2.3.5 Improved: Minor update. 2.3.4 Improved: Minor update. 2.3.2 Added: live with Analytics. Added: Test Payments. 2.3.1 Improved: Minor update. 2.3.0 Added: QR Code feature to the payment methods. 2.2.4 Improved: Compatibility with Loco Translate. 2.2.3 Added: Telegram notifications for payment alerts. 2.2.2 Improved: Made currency switcher optional. 2.2.1 Fixed: Minor bug fix. 2.2.0 Added: Multi-currency support. Added: Geo-based currency detection. Added: Fiat currency auto conversion. Added: Crypto currency auto conversion. Improved: Minor performance improvements. 2.1.4 Improved: Minor performance improvements. 2.1.3 Added: Messages tab to customize success message heading and description. Added: Option to make payment proof upload optional. Improved: Compatibility and performance. 2.1.1 Fixed: Minor bug fix. 2.1.0 Fixed: Minor bug fix. 2.0.9 Fixed: Minor bug fix. 2.0.8 Fixed: Minor bug fix. 2.0.7 Fixed: Minor CSS bug. 2.0.6 Fixed: Minor CSS bug. 2.0.5 Fixed: General bug fixes. 2.0.4 Fixed: General bug fixes. 2.0.3 Added: Routing Number field to Bank Transfer payment option. 2.0.2 Fixed: Payment popup issue. 2.0.1 Fixed: Payment popup issue. 2.0.0 Added: Help Center with popular guides and articles. Added: Setup Wizard for easier onboarding. Added: Widgets to guide admin on next steps after payments. Improved: Compatibility with popular WordPress themes. 1.5.6 Improved: Minor update. 1.5.5 Improved: Compatibility with other plugins. 1.5.4 Fixed: Checkout page theme compatibility issues. 1.5.3 Fixed: Frontend popup issue. 1.5.2 Improved: Minor changes. 1.5.1 Fixed: Theme compatibility issues. 1.5.0 Added: Cryptocurrency payment option. Added: Email screenshot attachment. Fixed: Popup theme compatibility issues. 1.0.8 Fixed: Account number overflow in frontend payment popup. Fixed: Payment details pagination. Fixed: Theme compatibility issues. 1.0.7 Fixed: PHP error on website accent characters. 1.0.6 Fixed: Frontend payment popup not responding on mobile on first try. 1.0.5 Fixed: Nonce verification error in Admin general settings. 1.0.4 Fixed: Payment options not clickable on mobile version of payment popup. 1.0.3 Fixed: Redirect issues in frontend popup after screenshot upload on customized checkout pages. 1.0.2 Improved: Direct Payments page counter and status colors. Improved: Empty state text (“No payments found”). Changed: Payment method selection logic in free version (only one option allowed). Changed: Upgrade box text and moved it under payment methods section in settings. Added: Target=”_blank” to all external links. 1.0.1 Fixed: Nonce verification error in General settings when Pro version installed. Fixed: Spelling error in P2P email (Plaftform → Platform). Fixed: Cancel icon in payment popup. Fixed: Order confirm/cancel email issue. Added: Currency & comma in email subject. Added: Countdown (5–0) in payment popup. 1.0.0 Initial release of Direct Payments for WooCommerce.

Vulnerability data © Defiant, Inc., provided under the Wordfence Intelligence T&C