Paymento – Non-Custodial Crypto Payment Gateway for WooCommerce
| 开发者 | paymento |
|---|---|
| 更新时间 | 2026年8月9日 12:39 |
| PHP版本: | 8.0 及以上 |
| WordPress版本: | 7.0 |
| 版权: | GPL-2.0-or-later |
| 版权网址: | 版权信息 |
详情介绍:
Paymento – The Non-Custodial Crypto Payment Gateway for WooCommerce
Paymento allows businesses and individuals to accept cryptocurrency payments directly into their own wallets, eliminating third-party risks, custody issues, and unnecessary fees.
🌟 Key Features:\
✔ Direct Wallet Payments – No intermediaries, full control over your funds.\
✔ Multi-Chain Support – Accept Bitcoin, Ethereum, USDT (ERC20 & TRC20), and more.\
✔ Secure & Private – Non-custodial solution with no private key access required.\
✔ Easy WooCommerce Integration – Install, configure, and start accepting crypto in minutes.\
✔ WooCommerce Blocks Compatible – Works with both classic and modern block-based checkout.\
✔ HPOS Compatible – Full support for High-Performance Order Storage.\
✔ Low Transaction Fees – Save costs compared to traditional payment gateways.\
✔ Developer-Friendly API – Expand functionality with simple API calls.
安装:
From your WordPress dashboard
- Go to Plugins > Add New.
- Search for "Paymento".
- Click "Install Now", then "Activate".
- Download the plugin zip file.
- Go to Plugins > Add New and click "Upload Plugin".
- Choose the zip file and click "Install Now".
- Click "Activate Plugin".
常见问题:
Does this plugin require an external API?
Yes, this plugin connects to Paymento's API to process crypto payments securely.
What are the costs associated with using Paymento?
The Paymento plugin is completely free to install and use. However, there is a 0.5% transaction fee per payment processed. Paymento also provides $100 in free credit, allowing you to process up to 20,000 transactions at no cost. After reaching this limit, the standard 0.5% transaction fee applies.
Does Paymento require my private key?
No, Paymento never asks for your private key. Paymento is a non-custodial payment gateway, meaning you remain in full control of your funds. You only need to share your XPUB (Extended Public Key) and account address with Paymento to generate payment addresses and track transactions securely.
Is this plugin compatible with WooCommerce Blocks?
Yes! The plugin is fully compatible with both classic WooCommerce checkout and the modern WooCommerce Blocks checkout experience.
Does this work with High-Performance Order Storage (HPOS)?
Absolutely! The plugin is fully compatible with WooCommerce's HPOS feature for improved performance.
What cryptocurrencies are supported?
Paymento supports Bitcoin, Ethereum, USDT (both ERC20 and TRC20), and many other cryptocurrencies. Check the Paymento dashboard for the complete list.
更新日志:
1.3.1 - 2026-08-09
🛡️ Security Release — update immediately
🛡️ Fixed:
- ✅ Orders could be marked paid without payment - The URL customers return to after paying accepted a payment status as a query parameter and trusted it. Anyone who knew the address of a store using this plugin could complete their own unpaid order. The return URL is now only a redirect: it reads the order's existing status and never changes it.
- ✅ Return URL restricted to Paymento orders - The endpoint did not check which gateway an order was placed with, so it could be aimed at orders paid by other methods. It now rejects any order not placed through Paymento. Orders are now completed solely by Paymento's payment notification (IPN), which is verified with an HMAC SHA256 signature and confirmed against the Paymento API before an order changes state. That check was already in place and was not affected.
- Clearer wording on the redirect page shown while sending a customer to Paymento.
- Removed leftover code and terminology inherited from a bank gateway template. Developers: the
send_to_bank()andreturn_from_bank()methods are nowredirect_to_paymento()andhandle_payment_return(). The return URL itself is unchanged, so nothing needs reconfiguring.
- ✅ Drastically fewer API requests - The plugin previously contacted the Paymento API twice on nearly every request to your site, including ordinary front-end page views, AJAX calls and scheduled tasks. Each API call now has a single, deliberate trigger.
- ✅ Faster page loads - Removing those blocking requests from the gateway's startup path speeds up front-end pages, the cart and checkout.
- ✅ Merchant status is cached - Your merchant name and account status are checked when you save the gateway settings and stored locally, along with the time of the last check. 🛡️ Security:
-
✅ Removed an unauthenticated endpoint -
/wp-json/paymento/healthwas publicly accessible and allowed any visitor to make your store contact the Paymento API. It has been removed. - ✅ Removed a redundant endpoint -
/wp-json/paymento/merchantrewrote your webhook settings on every request and is no longer registered. - ✅ TLS certificate validation enabled - API requests no longer skip certificate checks, so your API Key is never sent over an unverified connection. 🔧 Technical Improvements:
- Payment verification now runs only in response to a webhook notification, from a single code path
- The webhook handler reuses the existing gateway instance instead of creating a new one
- Admin script loads only on the Paymento settings screen
- Removed unused legacy code
⚠️ Note for developers: If you were calling
/wp-json/paymento/healthor/wp-json/paymento/merchant, those routes no longer exist. The webhook endpoint/wp-json/paymento/resultis unchanged.
- ✅ Merchant Name Display - Fixed authentication issues preventing merchant info from loading in admin settings
- ✅ Admin Authentication - Replaced JavaScript-based API calls with server-side PHP implementation
- ✅ Better Error Handling - Improved error messages for API connection issues
- ✅ Automatic IPN Setup - Webhook URL configuration now happens automatically when merchant info loads 🔧 Technical Improvements:
- Eliminated REST API authentication conflicts in admin area
- Server-side merchant information retrieval for better reliability
- Cleaner JavaScript code with reduced complexity
- Enhanced error reporting for troubleshooting
- ✅ WooCommerce Blocks Support - Full compatibility with modern block-based checkout
- ✅ HPOS Compatibility - Support for High-Performance Order Storage (WooCommerce 8.2+)
- ✅ Enhanced Security - Improved validation, capability checks, and error handling
- ✅ Better User Experience - Fixed infinite loading issues in checkout
- ✅ Translation Improvements - Proper textdomain loading timing 🔧 Technical Improvements:
- Fixed payment gateway registration timing issues
- Enhanced input sanitization and validation
- Improved error handling with user-friendly messages
- Better API response validation
- WordPress coding standards compliance
- Modern plugin structure following NOWPayments pattern
- Fixed translation loading warnings 🛡️ Security Enhancements:
- Added proper capability checks for admin functions
- Enhanced webhook signature validation
- Improved order data access patterns (HPOS-ready)
- Better input sanitization throughout 🐛 Bug Fixes:
- Fixed infinite loading when selecting payment method
- Resolved translation domain loading warnings
- Fixed plugin registration timing conflicts
- Improved error messages for missing API credentials 📋 Requirements Updated:
- WordPress 6.0+ (was 5.0+)
- WooCommerce 8.0+ (was 3.0+)
- PHP 8.0+ (was 7.0+)
- Non-custodial crypto payment gateway integration
- Support for Bitcoin, Ethereum, USDT (ERC20 & TRC20)
- Direct wallet payments - no intermediaries
- Basic webhook integration for payment notifications
- Debug logging for troubleshooting
- Two confirmation types: Immediate redirect or wait for confirmation 🔧 Initial Technical Implementation:
- REST API endpoints for webhook handling
- Basic input validation
- Translation ready (paymento-crypto-gateway domain)
- Compatible with WooCommerce 3.0+ 🛡️ Basic Security:
- HMAC SHA256 webhook signature validation
- Secure API communication with Paymento
- No private key requirements