WP Manifestindependent plugin directory
manifest / ecommerce / payu-mea-rpp-woocommerce

WooCommerce PayU Gateway WP RegistryMedium-severity findings · 1 findingOpen the reportB

PayU MEA Redirect Payment Page for WooCommerce

by PayU MEA · github.com/payumea/payu-mea-rpp-woocommerce · website

★ 4stars
1.3.3latest · 1 year ago

Install

Download source zip No release zip yet

This is the repository archive. It installs, but the folder name will carry the branch suffix and updates will not flow.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/payumea/payu-mea-rpp-woocommerce/archive/refs/heads/master.zip
No built-in updater. New versions won't appear under Dashboard → Updates. Install new releases yourself, or let Git Updater track the repository.
Readme github.com/payumea/payu-mea-rpp-woocommerce ↗

WooCommerce - PayU MEA Payment Gateway (Redirect)

Enables WooCommerce customers to do payments using PayU MEA (Middle East and Africa) as a payment gateway.

Installation

  1. Upload woocommerce-payu-mea-payment-gateway directory to the /wp-content/plugins/ directory
  2. Activate the plugin through the 'Plugins' menu in WordPress
  3. Navigate to the WooCommerce Payment gateway settings and configure with PayU MEA API details

Adding payment methods in WooCommerce plugin

  1. Payment methods names must be provided in capital letters
  2. Payment methods names must be provided as comma separated list Example image

Payment methods names can be found on https://payusahelp.atlassian.net/wiki/spaces/developers/pages/426054/setTransaction+RPP in field "SupportedPaymentMethods"

Configuration for Discovery Miles

If you have separate credentials for Discovery Miles, then:

  1. Fill the credentials for "Discovery Miles Store" (all three)
  2. put DISCOVERYMILES as last (required!) of methods in "Payment method" field (comma separated list)
  3. Check the checkbox "Discovery Miles"
  4. Set Discovery Miles "Transaction Type" na payment option title

Releases

7 releases.

Tag
Published
1.3.3 latest
May 7, 2025 1 year ago
1.3.2
Jun 5, 2024 2 years ago
1.3.1
Apr 15, 2022 4 years ago
1.3
Mar 30, 2021 5 years ago
1.2
Jul 23, 2020 6 years ago
1.1
Jul 13, 2020 6 years ago
v1.1
Nov 20, 2019 6 years ago

These releases are tags only. The author does not attach a packaged zip, so there are no download counts to report.

B grade

Security

WooCommerce PayU Gateway 1.0.0 · audited by WP Registry

Medium-severity findings.

1 medium
Audited release
1.0.0
Findings
1
Worst severity
medium
Content hash
027609386ee948c7425c8b0c…

Findings

  • medium Unauthenticated order note via PayU cancel callback

    missing_auth

    process_payu_callback routes action=cancelled&order_id= to process_cancel(), which loads WC_Order($_GET['order_id']) and add_order_note without verifying the requester paid/owns the order or a PayU signature. Any visitor who can hit the WC API endpoint can spam notes on arbitrary orders.

    woocommerce-gateway-payu.php:444-454,642-654

    Recommendation

    Require order key / session ownership or PayU-signed cancel payload before mutating orders. Validate order belongs to current customer session.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.

Full report on WP Registry →