WordPress maintenance or security needs? Reach out!
TLDWP

Plugin: onpay-io-for-woocommerce (Used by 118 domains)

Security snapshot

Across 118 onpay-io-for-woocommerce WordPress sites indexed by TLDWP, compared to the all-WordPress average.

Grade A 2% Grade B 3% Grade C 2% Grade D 8% Grade F 86%
Fail the header check (F)86%vs 82.5% avg
Leak usernames42%vs 38.5% avg
Expose a sensitive file5.1%vs 1.8% avg
Use HTTPS95%vs 96.2% avg

What stands out

TLDWP currently associates 118 indexed WordPress sites with onpay-io-for-woocommerce, equivalent to 0% of the current WordPress dataset.

The largest measured difference is header-grade F: 86.4% versus 82.5% overall (+3.9 percentage points).

Sensitive-file exposure is 5.1% vs 1.8% overall (+3.3 pp); Username enumeration is 41.5% vs 38.5% overall (+3 pp); HTTPS adoption is 94.9% vs 96.2% overall (-1.3 pp).

These are observational associations among sites where TLDWP detected onpay-io-for-woocommerce, not evidence that the technology, provider, or domain attribute caused a security outcome. See the overall WordPress security baseline.

OnPay.io for WooCommerce

πŸ‘€ OnPay.io

Plugin for WooCommerce, based on the official OnPay PHP SDK. The plugin adds the following functionality to WooCommerce: – Usage of OnPay as a payment method. – Validation of orders with callbacks directly from OnPay, outside the context of the cardholders browser. – Management of transaction on order pages in backoffice. Don’t have an OnPay account yet? Order one through DanDomain. OnPay sellers Dependencies PHP: >= 7.4 WordPress >= 6.7 WooCommerce >= 8.2

Domain Exposures Headers Last Checked
e*c*p*r*o*-*i*d*e*o*s*.dk (WP 7.0.4) F Sep 8, 2026
o*e*c*p*n*a*e*.com (WP 7.1) F Sep 8, 2026
c*r*t*a*.dk (WP 7.1) F Sep 8, 2026
i*s*o*t.dk (WP 7.0) F Sep 8, 2026
t*a*e*.dk (WP 7.0.4) F Sep 7, 2026
d*n*s*l*m*s.com (WP 7.1) D Sep 6, 2026
n*b*r*g*a*d.dk F Sep 6, 2026
e*s*s*e*l.dk F Sep 4, 2026
e*s*s*e*l.se F Sep 4, 2026
h*t*l*l*d*n*u*d.dk (WP 7.1) F Sep 3, 2026
s*-*l*x.com F Sep 3, 2026
x*c*a*t*.com (WP 7.1) F Sep 1, 2026
c*r*g*.nu (WP 6.9.1) D Sep 1, 2026
f*d*o*d.dk (WP 7.1) F Sep 1, 2026
x*m*p*r*s.com (WP 7.1) F Aug 31, 2026
d*t*k*n*t*s.dk (WP 6.7.1) F Aug 31, 2026
s*o*t*s*.dk (WP 7.1) D Aug 30, 2026
t*e*d*n.dk F Aug 30, 2026
c*r*s*a*s.com F Aug 30, 2026
a*l*b*g*a*d.com (WP 6.9.7) F Aug 29, 2026
n*m*u*-*o*o*c*c*e*.com (WP 7.1) F Aug 29, 2026
s*d*r*s.dk F Aug 29, 2026
s*a*f*e*d*i*i*g.dk (WP 7.1) F Aug 29, 2026
s*b*k*i*e*.dk (WP 7.1) F Aug 28, 2026
s*i*e*t*s*a*t*n.dk (WP 7.1) F Aug 28, 2026
s*-*l*x.fr F Aug 27, 2026
s*-*l*x.de F Aug 27, 2026
s*-*l*x.dk F Aug 27, 2026
s*u*a*e*r.dk F Aug 27, 2026
t*p*o*t*a*i*.dk (WP 7.1) F Aug 26, 2026
d*n*s.dk D Aug 25, 2026
s*e*o*a*r*w*b*h*p.dk (WP 7.1) F Aug 25, 2026
p*l*r*o*l*.dk (WP 7.1) F Aug 25, 2026
p*n*p*n*p*s*e*s.dk (WP 7.1) F Aug 24, 2026
c*p*n*a*e*b*i*a*.com (WP 7.0.4) F Aug 24, 2026
s*d*r*s.com F Aug 24, 2026
s*a*f*e*d*i*i*g.com (WP 7.1) F Aug 22, 2026
a*g*o*p.com (WP 6.7.7) F Aug 22, 2026
p*s*a*o*e.dk B Aug 22, 2026
b*o*d*m*l*u*t*a*i*n.dk F Aug 22, 2026
m*r*w*l*o*f.dk F Aug 22, 2026
n*v*r*r*p*e*.dk F Aug 21, 2026
s*c*a*t*e*e*f*r*m.dk (WP 7.1) F Aug 21, 2026
i*g*t*u*b*g*y.dk (WP 6.8.8) F Aug 21, 2026
o*k*r*i*.is (WP 7.0.4) D Aug 19, 2026
l*n*h*f*o*j*u*.dk (WP 7.0.4) F Aug 18, 2026
s*b*k*i*e*.com (WP 7.0.4) F Aug 16, 2026
m*l*n*r*d*.dk (WP 7.0.4) F Aug 16, 2026
d*n*c*r*.dk (WP 7.0.4) F Aug 16, 2026
g*m*r*w.com (WP 6.9.7) F Aug 15, 2026
x*-*g*n*e*t*g*-*c*.dk (WP 7.0.3) F Aug 14, 2026
b*t*k*o*i*e.dk F Aug 14, 2026
t*o*u*s*r*n*f*s*e*u*.dk (WP 7.0.4) F Aug 13, 2026
b*e*n*g*o*o*i*.dk F Aug 9, 2026
k*l*u*k*l*n*e*-*o*b*n*a*n.dk F Aug 8, 2026
n*r*i*k*a*n.dk (WP 7.0.3) F Aug 7, 2026
j*h*s*o*i*h*s.dk A Aug 6, 2026
t*n*e*r*a*.dk F Aug 6, 2026
r*n*h*n*t*r*i*v*s.dk (WP 6.9.5) F Aug 6, 2026
s*g*p*e*e*o*s*n*n*.dk (WP 7.0.2) F Aug 6, 2026
p*t*n*t*k*d*n*a*k.dk (WP 7.0.2) F Aug 5, 2026
h*m*u*i*e*s*.dk (WP 7.0.2) F Aug 5, 2026
h*a*i*g*y*h*n*l*.dk (WP 7.0.2) F Aug 5, 2026
b*t*e*i*.dk (WP 7.0.2) F Aug 4, 2026
t*g*a*s*e*i*l*s*e*.dk (WP 7.0.2) F Aug 3, 2026
v*e*b*l*i*s*.dk (WP 6.4.8) F Aug 3, 2026
b*h*s*i*g.dk (WP 6.9.5) F Aug 3, 2026
x*-*t*n*e*r*-*0*.dk F Aug 3, 2026
a*g*a*d*t*y.dk (WP 7.0.2) F Aug 3, 2026
n*w*o*m*l.dk (WP 7.0) F Aug 3, 2026
h*l*y*t*d*o.dk (WP 6.9.1) B Aug 2, 2026
k*k*e*b*r*.dk F Aug 1, 2026
a*e*o*e*e*s*n*v*r*i*y.com (WP 7.0.2) F Aug 1, 2026
u*o*.com F Jul 30, 2026
s*i*t*i*k*.com (WP 7.0.2) F Jul 29, 2026
f*s*g*m*s.dk (WP 6.8.6) F Jul 29, 2026
c*r*e*d*s*i*a*i*n*e*m*r*.com (WP 7.0.2) F Jul 29, 2026
d*s*g*-*a*d*n*r.dk F Jul 28, 2026
g*m*e*k*l*.dk (WP 7.0) F Jul 28, 2026
w*b*t*c*.dk (WP 6.9.4) F Jul 28, 2026
a*u*l*g*.dk (WP 7.0.2) F Jul 28, 2026
k*i*r*n.dk (WP 5.8.13) F Jul 28, 2026
l*n*w*o*.com (WP 7.0.2) F Jul 27, 2026
z*n*b*l.dk (WP 7.0.2) D Jul 26, 2026
r*n*a*p*r*o*m*n*e*a*t*.com (WP 7.0.2) F Jul 26, 2026
s*a*e*s*o*p*n.dk (WP 7.0.2) F Jul 26, 2026
d*a*a*c*.dk (WP 7.0.2) D Jul 25, 2026
t*a*e*s*o*.com (WP 6.8.3) F Jul 25, 2026
u*i*u*t*.nu (WP 6.9.4) B Jul 24, 2026
k*f*e*h*h*s*t.dk F Jul 24, 2026
l*d*s*a*d*r.dk (WP 7.0.2) F Jul 23, 2026
b*d*n*s*.com (WP 7.0.2) C Jul 23, 2026
s*y*m*g*n*e*s*n.dk (WP 7.0.2) F Jul 23, 2026
s*j*r*q*i*t.dk (WP 7.0.2) F Jul 23, 2026
e*k*r*s*o*e.dk (WP 7.0.2) F Jul 23, 2026
b*e*.dk (WP 7.0.2) D Jul 23, 2026
c*h*b*u*e*j*l*r.dk (WP 7.0.2) F Jul 23, 2026
w*c*a*c*.com (WP 6.9.5) F Jul 22, 2026
l*l*m*r*h*n*.com A Jul 22, 2026
s*k.dk (WP 7.0.2) F Jul 22, 2026