← Back to all sparks
P

Paymattic

E-COMM
Velocity2.5

WordPress payment and donation plugin with subscriptions, forms and multiple payment gateways

Paymattic turns to security hardening after months of gateway-parity features.

wordpress-paymentsdonationspayment-gatewayssecurity-hardeningsubscriptions
◆Current state
Paymattic is a WordPress payments and donations plugin that has spent the year matching dedicated donation plugins: Gift Aid, fee recovery, a GiveWP migrator, Xendit subscriptions and Stripe card updates. Its last three releases lean on security: 4.6.26 hardened Stripe, Razorpay and Mollie flows and paginated the user dashboard server-side, 4.6.27 fixed Stripe subscription security and added custom webhook headers, and 4.6.28 tightened output escaping.
◆Where it's heading
Three security-heavy releases in three weeks suggest an audit pass on the payment flows. Feature work has slowed to small developer options like webhook headers.
◆Prediction
Expect gateway-parity features to resume once the hardening pass ends; which gateway is next is unclear from the entries.

◆Recent moves

  1. 1mo ago

    Paymattic 4.6.28: Output Escaping and Data Handling Fixes

    A security-focused Paymattic release with better output escaping and safer data handling across forms, submissions and payment settings. Worth applying for any site taking payments through the plugin.

    View source ↗
  2. 1mo ago

    Paymattic 4.6.27: Custom Webhook Header Keys, Smarter Quantity Validation, and More!

    Custom webhook header keys and server-side quantity validation arrive with a Stripe subscription security fix. It sits in a run of releases focused on hardening payment flows.

    View source ↗
  3. 1mo ago

    Paymattic 4.6.26: Server-Side Dashboard Pagination, Security Hardening, and More!

    Server-side pagination speeds up the user dashboard, and Stripe, Razorpay and Mollie payments get security hardening. It opens the security-focused stretch that 4.6.27 and 4.6.28 continued.

    View source ↗
  4. 2mo ago

    Paymattic 4.6.25: Stripe Card Update, Feed Mapping, Square Verification, and More

    Stripe card updates, feed mapping, and Square verification arrive together, continuing the gateway-parity work that runs through the release history. The announcement is a teaser, so the titles carry the scope.

    View source ↗
  5. 4mo ago

    Paymattic 4.6.23: Gift Aid Declarations, Fee Recovery Field, and More!

    Gift Aid declarations and a fee-recovery field target UK charity fundraising specifically, letting donors claim tax relief and absorb processing fees. It is the clearest example of Paymattic building for nonprofits rather than general commerce.

    View source ↗
  6. 5mo ago

    Introducing Paymattic 4.6.22: Migrate from GiveWP to Paymattic, and More!

    A GiveWP migrator moves forms, donors, donations, and subscriptions across in a few clicks. It does not change what the plugin does, but it names the install base Paymattic is competing for.

    View source ↗