How many vulnerabilities does CostaTech – Express Checkout for Shop Pay have?

The audit found 41 findings: 1 critical, 3 high, 23 medium severity.

Should I use CostaTech – Express Checkout for Shop Pay?

Based on the latest audit (grade C, risk CRITICAL), review the 41 findings on this page before deciding — higher-risk findings should be weighed against the plugin's alternatives.

CostaTech – Express Checkout for Shop Pay

Q: Is CostaTech – Express Checkout for Shop Pay secure?

WP HealthKit's independent audit rates CostaTech – Express Checkout for Shop Pay overall risk as CRITICAL with a report-card grade of C.

Audited at release

v1.0.0WordPress PluginAudited 12 days ago

Shopify's Shop Pay Wallet for your store - a fast "Buy with Shop Pay" express button plus a normal payment method entry.

CRITICAL

Total Findings

Security Grade

Security Findings

Critical1

High3

Medium23

Low7

Info7

Executive Summary

Is CostaTech – Express Checkout for Shop Pay secure? In WP HealthKit's independent 2026 audit, CostaTech – Express Checkout for Shop Pay received an overall risk of CRITICAL and a report-card grade of C across 41 findings (1 critical, 3 high severity).

Directory audit — deterministic scanners only (Wordfence, OSV, PHPCS, PHPStan, Semgrep, Psalm, compat). Sign in and run a full audit for AI-grade analysis (security, quality, accessibility).

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

SecurityPHP CompatibilityWooCommerce CompatibilityCoding StandardsType SafetyPlugin ConflictsHook WiringPerformancecompatibilityWordPress CompatibilityDependencies

Plugin Info

Audit Count: 1
Type: plugin

Embed

Show your audit status in your README or website.

[![CostaTech – Express Checkout for Shop Pay security audit by WP HealthKit](https://wphealthkit.com/api/badge/by-slug/costatech-express-checkout-for-shop-pay)](https://wphealthkit.com/directory/costatech-express-checkout-for-shop-pay)

Paste this in your GitHub README or any Markdown file. The badge updates automatically on every re-audit — no need to refresh the snippet.

Site owners: should they update?

Are you the developer?

Claim this listing to get a Verified badge, control public audits, and get automatic re-scans.

Claim This Plugin

PHP Compatibility

Requires PHP 8.0Declared minimum: 7.4Mismatch detected

Categories with Findings

SecurityPHP CompatibilityWooCommerce CompatibilityCoding StandardsType SafetyPlugin ConflictsHook WiringPerformancecompatibilityWordPress CompatibilityDependencies

CostaTech – Express Checkout for Shop Pay

Security Findings

Executive Summary

Security Report Card

PHP Compatibility

Categories with Findings

Plugin Info

Embed

Are you the developer?

Audit Your Plugin

PHP Compatibility

Categories with Findings