WordPress.org

Ready to get started?Download WordPress

Plugin Reviews

WordPress Simple Paypal Shopping Cart

Very easy to use Simple WordPress Paypal Shopping Cart Plugin. Great for selling products online in one click from your WordPress site.

1236

58 reviews
Average Rating
4 stars
4.3 out of 5 stars
5 stars
Easy and quick
By , for WP 3.9

Needed a simple plug-in for someone who wanted to sell just one item, and this fit the bill. Setting it up was quick and easy.

4 stars
Security considerations when selling digital goods
By , for WP 3.9

Hello.

I'm using this plugin standalone on my wordpress site to sell software licenses. Maybe this plugin is valid for manual sales but It's insecure and I want to share my findings.

If you manually check transactions at paypal before sending items, or have additional fraud controls you are safe, so ignore my comments :)

By default you are exposed to several fraud risks if you use this plugin to sell digital goods that should be considered.

1- eCommerce impersonation: business paypal address are not valided by default. Therefore someone could resend you other ecommerce valid IPN notification and trigger actions one your system.

as a quick fix por paypal.php code:

$business = $this->ipn_data['business'];
if ($business != 'ecommerce@yoursite.com' ) {
$this->debug_log('INVALID IPN: unknown business: '.$business,true);
die();
}

I've implemented somo functions to generate software licenses once the IPN is validated however there are some more security considerations:

2 - IPNs can be send several times by an attacker. Be careful and check if paypal transaction ID was already used ( $txn_id ). Unless you check it you are going to sell items or generate licenses more than once for the same payment.

3- Prices are not validated: An user can intercept the request generated by the browser and modify the product price before it reaches paypal, because its not using certificate keys. An attacker can set a price of 0.1$ for example.
Your payment will succeed in the same way as the transaction (IPN) validation once it reaches your wordpress site, because the transaction is valid and was generated from paypal (the only problem is that paypal doesn't know which price is the real one.)
Double check your price at $current_cart_item['price'] for your cart or mc_gross when paying with a paypal button.

Regards,

Andres Tarasco

5 stars
Simple and good plugin
By , for WP 3.9

Got into a bit of trouble initially using this plugin and thought it was a poorly coded plugin.

After some debugging found that it will conflict with anybody creating custom post type with name "product". It will somehow redirect you to a search not found page when you "add to cart".

Hope the author can change his underlying framework to use a more unique name. A custom product type of name "product" is quite common and will easily conflict with your plugin.

5 stars
Highest Praise for Tips & Tricks
By ,

WP Simple Paypal Shopping Cart is an extremely versatile and easy to customise plugin. It allows for physical and digital products, with great options for presentation. Furthermore, the technical support has been excellent, despite the fact that it a free product.

1 star
Not works "Add to Cart"
By , for WP 3.9

Not works "Add to Cart" button Boutique theme from elegantthemes.com.
i can't give one star ...

5 stars
Really simple
By ,

One of the best

5 stars
Liked!
By ,

I liked it. It simple to use.

5 stars
Wow!
By , for WP 3.8.1

I was looking for this for a very long time.

"Simplify is harder than complicate"

Thank you very much.

2 stars
Needs Google Analytics Integration
By , for WP 3.8.1

Great plug in, but it would be really nice to be able to add Google Analytics Event Tracking to the add to cart or checkout button this plug in generates

I've tried many ways of implementing this with no success.

5 stars
Easy to use, easy to customize
By ,

I'm really impressed with this plugin. Lots of useful features. Really easy to insert a button or the cart anywhere on your website. Great job!

You must log in to submit a review. You can also log in or register using the form near the top of this page.