WP Manifestindependent plugin directory
manifest / ecommerce / twint-woocommerce-extension

TWINT Payment for WooCommerce WP Registry grade B. Medium-severity findings · 2 findingsWP RegistryMedium-severity findings · 2 findingsOpen the reportB #3 in eCommerce

★ 12stars
20krelease downloads
≈820active sites
1.7.12latest · 15d ago

Install

Download twint-woocommerce-extension.zip From the 1.7.12 release on GitHub, Oct 7, 2026

Upload it under Plugins → Add New Plugin → Upload Plugin, then activate.

Install straight from GitHub with WP-CLI:

wp plugin install https://github.com/twint-ag/twint-woocommerce-extension/releases/download/1.7.12/twint-woocommerce-extension.zip
Updates itself. It ships its own updater (Plugin Update Checker), so new versions appear under Dashboard → Updates.

TWINT Payment Plugin for WooCommerce

This plugin seamlessly integrates the TWINT payment gateway with your WooCommerce store, offering both Regular and Express Checkout options for a flexible, secure payment experience for your customers.

Key Features

  • Regular Payment: Customers can complete purchases using TWINT through the standard checkout process.
  • Express Checkout: A faster checkout option designed to simplify and shorten the payment process for customers.

Language Support

The module supports the following languages:

  • English (en_US/en_GB)
  • German (de_DE/de_CH)
  • French (fr_FR/fr_CH)
  • Italian (it_IT/it_CH)

Requirements

  • WordPress version 5.9 and up
  • WooCommerce version 6.0.0 and up
  • PHP version >= 8.1
  • PHP soap extension
  • A TWINT account

Configuration

  1. Access TWINT Settings: In your WordPress admin dashboard, select TWINT from the main sidebar menu.

  2. Set Up TWINT Credentials: On the TWINT Settings page, upload your TWINT certificate file and enter the required account information, including API credentials, to complete the integration.

  3. Configure Payment Methods: Go to the TWINT Checkout and TWINT Express Checkout sections to set up the available payment methods. You can customize settings such as payment flow and button placement for Express Checkout to fit your store’s needs.

  4. Save Changes: After configuring the settings in each section, click Save to apply your changes.

Usage

Once the plugin is installed and configured, TWINT will appear as a payment option at checkout. Customers can choose to pay using TWINT via the full Regular Checkout process or through the quicker Express Checkout button.

Support

For any issues or feature requests, submit a GitHub issue or contact our support team at plugin@twint.ch.

License

This module is licensed under the MIT License. For more details, see the LICENSE file.

Releases

Newest 25 of 60 recorded releases. Each count is every asset in that release; expand a row for the breakdown.

Tag
Published
Assets
Downloads
1.7.12 latest
Oct 7, 2026 15d ago
twint-woocommerce-extension.zip
907
Sep 16, 2026 1mo ago
twint-woocommerce-extension.zip
1,529
Sep 8, 2026 1mo ago
twint-woocommerce-extension.zip
705
Sep 8, 2026 1mo ago
twint-woocommerce-extension.zip
154
Jul 9, 2026 3mo ago
twint-woocommerce-extension.zip
2,005
Jun 16, 2026 4mo ago
twint-woocommerce-extension.zip
824
Jun 5, 2026 4mo ago
twint-woocommerce-extension.zip
752
May 27, 2026 4mo ago
twint-woocommerce-extension.zip
639
May 22, 2026 5mo ago
twint-woocommerce-extension.zip
563
May 15, 2026 5mo ago
twint-woocommerce-extension.zip
693
May 14, 2026 5mo ago
twint-woocommerce-extension.zip
272
May 8, 2026 5mo ago
twint-woocommerce-extension.zip
650
Apr 23, 2026 6mo ago
twint-woocommerce-extension.zip
792
Apr 10, 2026 6mo ago
twint-woocommerce-extension.zip
539
Apr 2, 2026 6mo ago
twint-woocommerce-extension.zip
474
Mar 5, 2026 7mo ago
twint-woocommerce-extension.zip
306
Feb 26, 2026 7mo ago
twint-woocommerce-extension.zip
396
Feb 23, 2026 8mo ago
twint-woocommerce-extension.zip
307
Feb 13, 2026 8mo ago
twint-woocommerce-extension.zip
423
Feb 13, 2026 8mo ago
twint-woocommerce-extension.zip
31
Feb 10, 2026 8mo ago
twint-woocommerce-extension.zip
300
Feb 5, 2026 8mo ago
twint-woocommerce-extension.zip
315
Jan 29, 2026 8mo ago
twint-woocommerce-extension.zip
364
Jan 22, 2026 9mo ago
twint-woocommerce-extension.zip
339
Jan 22, 2026 9mo ago
twint-woocommerce-extension.zip
40
All releases on GitHub →

Active-site estimate ≈820 comes from the median of recent superseded releases. Method.

B grade

Security

TWINT Payment for WooCommerce 1.7.12 · audited by WP Registry

Medium-severity findings.

1 medium 1 low
Audited release
1.7.12
Findings
2
Worst severity
medium
Content hash
08981bfdfc0372c5687ead49…

Findings

  • medium Unauthenticated payment cancel by pairing UUID

    POST /twint/v1/payment/cancel is publicly callable. Knowing the 36-character pairing UUID (exposed to the checkout client) lets an unauthenticated caller cancel that pairing via MonitorService::cancel, disrupting payment completion without proving cart/session ownership.

    src/Api/Frontend/CancelPaymentAction.php:34-60

    Recommendation

    Require a checkout session nonce, order key, or HMAC tied to the pairing before cancel; rate-limit by IP.

  • low Public payment information discloses pairing token

    information_disclosure

    POST /twint/v1/payment/information returns pairing id, token, amount, and finished flag to any caller with the pairing UUID. Token exposure aids further client-side payment flows if UUID leaks.

    src/Api/Frontend/PaymentInformationAction.php:32-55

    Recommendation

    Require session binding; minimize token fields returned to unauthenticated polls.

WP Registry hashes the installable build and reports on that exact bytes-for-bytes copy. Embargoed findings are withheld until they are disclosed, so a clean verdict means nothing public is outstanding. WP Manifest does not audit code itself.