How many vulnerabilities does BareBits – Lightning Payments via Bitcoin have?

The audit found 83 findings: 1 critical, 16 high, 53 medium severity.

Should I use BareBits – Lightning Payments via Bitcoin?

Based on the latest audit (grade D, risk CRITICAL), review the 83 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

BareBits – Lightning Payments via Bitcoin

Q: Is BareBits – Lightning Payments via Bitcoin secure?

WP HealthKit's independent audit rates BareBits – Lightning Payments via Bitcoin overall risk as CRITICAL with a report-card grade of D.

Audited at release

v1.5.3WordPress PluginAudited 4 days ago

Accept Bitcoin (on-chain and Lightning) in WooCommerce through a BareBits server. No approval process, no middlemen. Low 1% fee.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical1

High16

Medium53

Low10

Info3

Executive Summary

Is BareBits – Lightning Payments via Bitcoin secure? In WP HealthKit's independent 2026 audit, BareBits – Lightning Payments via Bitcoin received an overall risk of CRITICAL and a report-card grade of D across 83 findings (1 critical, 16 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.0

Categories with Findings

CSRFPlugin LifecycleFile SecurityCoding StandardsType SafetyWooCommerce CompatibilityHook WiringPerformanceInternationalizationAuth & AuthorizationSecurityWordPress CompatibilitycompatibilityTheme StandardsDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![BareBits – Lightning Payments via Bitcoin security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/barebits-lightning-payments-via-bitcoin)](https://wphealthkit.com/directory/barebits-lightning-payments-via-bitcoin)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 8.0

BareBits – Lightning Payments via Bitcoin

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings