Pago por Redsys icon

Pago por Redsys

Pago por Redsys is a WordPress plugin with the following stats:

  • #3,275 Global Rank
  • 700+ active installs
  • 5/5 8 ratings
  • Since 2016 10 years active

PF Score (About PF Scores)

PF Score is not a quality guarantee. It is a ranking based on available public signals.

Bronze54.4
Platinum
Gold
Silver
Bronze
Low

Score Breakdown

47.4
Popularity 40% 700+ active installs
71.4
Reputation 35% 5★ from 8 ratings
41.5
Freshness 25% Updated 1 years ago

No active penalty — 1 historical CVE, resolved — details

Download Trends

Loading download data…

Vulnerabilities

1 Total
1 Patched
0 Active
100% Resolved rate
CWE-79 · Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')

The Pago por Redsys plugin for WordPress is vulnerable to Reflected Cross-Site Scripting via the 'Ds_MerchantParameters' parameter in all versions up to, and including, 1.0.12 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that execute if they can successfully trick a user into performing an action such as clicking on a link.

6.1 Medium Affected All – 1.0.12 Patched in ✓ 1.0.13 Published 21 Feb 2025 CVE CVE-2024-12467

Vulnerability data provided by Wordfence Intelligence (opens in a new tab). CVE data: Copyright 1999–2026 The MITRE Corporation. CVE Terms of Use (opens in a new tab).

About Pago por Redsys

With this plugin you can have a payment gateway on your website. Your customers can pay you through an online POS.

REQUIRES TO HAVE TPV REDSYS CODES WITH YOUR BANK

With this plugin you can have a payment gateway on your website. Your customers can pay you through an online POS.

The plugin sends the user to the Redsys payment gateway with the order number and the amount that the user dials or that you have pre-filled (you can see more in the FAQ)

Screenshots

Corresponds screenshot-1.jpg. This is how the contact form is displayed. The title takes it from the h2 styles and the user fills in, if the pre-filled url has not been passed (see the FAQ).

Corresponds screenshot-1.jpg. This is how the contact form is displayed. The title takes it from the h2 styles and the user fills in, if the pre-filled url has not been passed (see the FAQ).

Corresponds screenshot-2.jpg. We send the user to the Redsys gateway with the order number and the amount to pay.

Corresponds screenshot-2.jpg. We send the user to the Redsys gateway with the order number and the amount to pay.

Corresponds screenshot-3.jpg. When the payment has been made satisfactorily, the user returns to our page with the order information and the message that we have written.

Corresponds screenshot-3.jpg. When the payment has been made satisfactorily, the user returns to our page with the order information and the message that we have written.

Frequently Asked Questions

Can it be used without having a TPV Redsys contracted with the bank?

No. In order for the plugin to work, you need the “business identifier” and a terminal configured with your encryption key. This can only be given by your bank.

Can I configure all the texts? The correct payment and those prior to the form?

Yes. The plugin is developed so that the user always goes to the same page where you configure the gateway, making the shortcodes show or hide depending on the payment step you are on.

Does this plugin save user information?

No. It is a payment gateway, simply the plugin forwards the merchant’s information, the price to pay and the reference to the order.

Can I pre-fill the fields so that the user only has to make the payment?

Yes. The fields search for $ _GET for the values ​​’np’ and ‘c’.
‘np’: ‘Order number’
‘c’: ‘Amount to pay’
Therefore doing /? Np = 123 & c = 1 we would have the fields “Order number” with “123” and the “Amount to pay” with “1”

The order number always adds 3 values ​​to me before, can I avoid it?

No. This is because the bank can only process each order if the order number is different. Therefore it is necessary in case a user fails an order, he could never pay with the same number again.

How to redirect user before correct and wrong payment?

Each [pago_tpv] can have an url_ko and url_ok attrbute. Also on global configuration can put a url_ko or url_ok for all the return. If you don’t specify, it will return to the same page. It is advisable put and url_ok on shortcode or in config.

Ratings & Reviews

5
8 ratings
5★
8
4★
0
3★
0
2★
0
1★
0

Recent Reviews

Loading reviews…

View all reviews on WordPress.org (opens in a new tab)

Changelog

1.0.14

Compatibility with WordPress 6.7.2

1.0.13

Fix problem with the return URL

1.0.12

Fix loaded hook and compatibility with 6.7

1.0.11

1.0.10

Fixed problem with tags and uploads

1.0.9

Updated WordPress compatibility to 6.3

1.0.8

Fix undesirable echo

1.0.7

Add field description to the form.
Thanks to Beatriz Lavela

1.0.6

PHP8 Compatibility

1.0.5

Fix problem on send URL_KO and URL_OK to Redsys

1.0.4

Add URL_KO and URL_OK by form and global
Now you can declare a diferent return page from the TPV in every single form or to all. If you don’t specify anything it will return to the same page (and use the old shortcodes)

1.0.3

  • Change name for Redsys API Class to don’t conflict with the same class loaded from other plugins.
    Thanks to @jconti

1.0.2

  • Setting float to int in DS_MERCHANT_AMOUNT, because json_encode adds decimals in case of float
  • Translated all plugin to English to be standard with the WordPress Repository

1.0

  • Launch of the payment gateway

Alternatives to Pago por Redsys

Other WordPress plugins serving a similar purpose, ranked by relevance and PF Score.

Platinum96.3
WooCommerce icon

WooCommerce

Complete e-commerce platform for launching and growing online stores on WordPress.

★ 4.5/5·7.0M+ installs·Updated 10 Aug 2026
Platinum90.2
SureCart – Ecommerce Made Easy For Selling Physical Products, Digital Downloads, Subscriptions, Donations, & Payments icon

SureCart

All-in-one ecommerce platform for WordPress handling payments, subscriptions, and online stores.

★ 4.8/5·80K+ installs·Updated 5 Aug 2026
Platinum89.4
TI WooCommerce Wishlist icon

TI WooCommerce Wishlist

Enables WooCommerce customers to save and share their favorite products via wishlists.

★ 4.7/5·100K+ installs·Updated 24 Jun 2026
Platinum88.8
Download Monitor icon

Download Monitor

Manage file downloads and digital products with password protection and access controls on WordPress sites.

★ 4.5/5·80K+ installs·Updated 14 Aug 2026
Platinum88.2
Easy Digital Downloads – eCommerce Payments and Subscriptions made easy icon

Easy Digital Downloads

Platform for selling digital products, ebooks, and software with integrated payment processing.

★ 4.7/5·40K+ installs·Updated 14 Aug 2026
Platinum88.0
Mailchimp for WooCommerce icon

Mailchimp for WooCommerce

Integrate WooCommerce with Mailchimp to automate email marketing and recover abandoned carts.

★ 4/5·200K+ installs·Updated 7 Aug 2026
Platinum86.5
Download Manager icon

Download Manager

Manage file downloads and sell digital products from your WordPress site.

★ 4.1/5·100K+ installs·Updated 30 Jul 2026
Platinum85.2
Mercado Pago payments for WooCommerce icon

Mercado Pago payments for WooCommerce

Accept Mercado Pago payments directly on WooCommerce storefronts for customer checkouts.

★ 3.9/5·100K+ installs·Updated 3 Aug 2026