{
    "title": "WooCommerce PayPal Payments",
    "seo_title": "WooCommerce PayPal Payments: review and settings",
    "h1": "WooCommerce PayPal Payments",
    "description": "WooCommerce PayPal Payments in detail: which stores it suits, strengths, limits, recommended settings (reCAPTCHA, 3D Secure) and past vulnerabilities.",
    "lead": "WooCommerce PayPal Payments, PayPal’s free official plugin for WooCommerce, brings together PayPal, Pay Later, cards, Apple Pay, Google Pay and local methods. Our take to help you decide whether it fits your store, the settings that slow down card testing, and its past vulnerabilities.",
    "language": "en",
    "locale": "en-US",
    "type": "plugin-sheet",
    "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/",
    "canonical": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/",
    "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/index.md",
    "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/index.json",
    "published": "2026-11-04T08:00:00+00:00",
    "modified": "2026-11-05T21:29:52+00:00",
    "site": {
        "name": "WP Masquerade",
        "url": "https://www.wp-masquerade.com/"
    },
    "translations": [
        {
            "language": "en",
            "hreflang": "en-US",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-paypal-payments/index.json"
        },
        {
            "language": "fr",
            "hreflang": "fr-FR",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/fr/fonctionnalites/extensions-camouflees/woocommerce-paypal-payments/index.json"
        },
        {
            "language": "es",
            "hreflang": "es-ES",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/es/funcionalidades/plugins-camuflados/woocommerce-paypal-payments/index.json"
        },
        {
            "language": "de",
            "hreflang": "de-DE",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/de/funktionen/getarnte-plugins/woocommerce-paypal-payments/index.json"
        },
        {
            "language": "it",
            "hreflang": "it-IT",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/it/funzionalita/plugin-camuffati/woocommerce-paypal-payments/index.json"
        },
        {
            "language": "pt",
            "hreflang": "pt-BR",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/pt/recursos/plugins-wordpress-camuflados/woocommerce-paypal-payments/index.json"
        },
        {
            "language": "nl",
            "hreflang": "nl-NL",
            "title": "WooCommerce PayPal Payments",
            "url": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/woocommerce-paypal-payments/",
            "markdown": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/woocommerce-paypal-payments/index.md",
            "json": "https://www.wp-masquerade.com/nl/functies/gecamoufleerde-plugins/woocommerce-paypal-payments/index.json"
        }
    ],
    "headings": [
        {
            "level": 1,
            "text": "WooCommerce PayPal Payments"
        },
        {
            "level": 2,
            "text": "What WooCommerce PayPal Payments does in your store"
        },
        {
            "level": 2,
            "text": "Which stores PayPal Payments suits"
        },
        {
            "level": 2,
            "text": "WooCommerce PayPal Payments strengths and limits"
        },
        {
            "level": 3,
            "text": "Strengths"
        },
        {
            "level": 3,
            "text": "Limits"
        },
        {
            "level": 2,
            "text": "The PayPal Payments settings we recommend"
        },
        {
            "level": 2,
            "text": "PayPal Payments security: order data and card testing"
        },
        {
            "level": 2,
            "text": "WooCommerce PayPal Payments FAQ",
            "id": "faq"
        }
    ],
    "body": "## The essentials\n\n- Best for taking PayPal, Pay Later, cards and local methods through a single provider.\n- Main caveat: advanced cards and saved payment methods depend on your country and PayPal approval.\n- Free plugin; PayPal charges a fee on each transaction, varying by country and payment method.\n\n## What WooCommerce PayPal Payments does in your store\n\nWooCommerce PayPal Payments is PayPal’s official integration for [WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce/). It is published by WooCommerce, with PayPal, Automattic and the agency Syde among its listed contributors on wordpress.org. The plugin adds payment methods to checkout: PayPal buttons, Pay Later, Venmo in the US, credit and debit cards, Apple Pay, Google Pay and local methods such as iDEAL, Bancontact, BLIK, Przelewy24 or Trustly, depending on the country of the PayPal account.\n\nThe buttons can also appear on product pages, in the cart and in the mini cart for express checkout. Cards come in two flavors: standard processing, where PayPal shows its own card form, and Advanced Card Processing, with card fields embedded in your page, 3D Secure and fraud tools. Card numbers are typed into elements served by PayPal, not into your own forms. Refunds are issued from the WooCommerce order screen.\n\nThe plugin is free and requires WooCommerce 9.6 or later, plus a PayPal business or personal account. PayPal makes its money from per-transaction fees, which vary by country and payment method.\n\n![Diagram: WooCommerce PayPal Payments works on visitors and bots, database and files, external services. Public traces: folder name (hidden with Pro); tag IDs (hidden with Pro); JavaScript variables (still visible); CSS classes (still visible); files served by the vendor (still visible).](https://www.wp-masquerade.com/media/wpm-sheets/wc-paypal/diagram-en.svg?v=d11bd00b)\n\n## Which stores PayPal Payments suits\n\nPayPal Payments makes sense when PayPal already is, or should become, your main payment provider:\n\n- **Stores whose customers pay with PayPal** and would rather not type in a card number.\n- **Mid-sized baskets where installments matter**: Pay Later and its messaging show the pay-over-time option right on the product page, in countries where PayPal offers it.\n- **Stores selling across several European countries** that want iDEAL, Bancontact or BLIK without adding one provider per country.\n- **Subscriptions** with WooCommerce Subscriptions or PayPal Subscriptions, as long as you have a business account.\n\nIt is not the best pick if you want a different processor for cards: [Stripe for WooCommerce](https://www.wp-masquerade.com/features/camouflaged-plugins/woocommerce-stripe-payment-gateway/) or WooPayments handle them without a PayPal account, and PayPal Payments can then be limited to the PayPal button. For a single product or donations, a PayPal payment link is enough.\n\n## WooCommerce PayPal Payments strengths and limits\n\n### Strengths\n\n- **One provider for many payment methods.** PayPal, Pay Later, cards, Apple Pay, Google Pay and local methods all run through the same account and dashboard.\n- **Built-in card-testing protection.** Since version 3.3.0, an invisible reCAPTCHA v3 backed by a v2 challenge guards PayPal’s payment endpoints, cards included.\n- **Works with blocks and subscriptions.** Cart and Checkout blocks, the mini cart, block themes and WooCommerce Subscriptions are supported.\n- **Free and actively maintained.** A new release ships roughly every month.\n\n### Limits\n\n- **Features gated by PayPal.** Advanced cards, saved payment methods and some local methods depend on your country and on eligibility or an extra application with PayPal.\n- **Deep changes between releases.** The legacy interface was removed in 4.0.1, 4.0 was flagged as a major update to back up for, and 4.2.0 moved every store to the v6 JavaScript SDK.\n- **Sensitive to caching and minification.** The vendor warns that buttons can vanish when PayPal scripts are minified or cached with the payment pages.\n- **Settings screens only partly translated.** In several languages, most labels on the Settings and Styling tabs still appear in English.\n\n## The PayPal Payments settings we recommend\n\nPayment settings live under WooCommerce > Settings > Payments > PayPal; reCAPTCHA protection has its own screen on the Integration tab. Labels below are from version 4.2.0. Test every change in Sandbox mode or with a small real order.\n\n| Setting | Recommended value | Why |\n| --- | --- | --- |\n| **Enable reCAPTCHA protection**  Settings > Integration > WooCommerce PayPal Payments reCAPTCHA | On, with both v3 and v2 keys | Off by default. Slows down bots testing stolen cards; protection only kicks in once all four Google keys are entered. |\n| **Score Threshold**  Same screen | 0.5 (the default) to start | Below this v3 score, the shopper sees the “I’m not a robot” checkbox. Tune it from the reCAPTCHA console, not by guesswork. |\n| **Guest Orders Only**  Same screen | Unchecked, unless registration already has a CAPTCHA | Checked by default, it skips logged-in customers, yet a bot can register an account and then test cards. |\n| **3D Secure**  Payments > PayPal > Settings | “Only when required” | Authenticates the cardholder when their bank requires it. Successful authentication can shift liability for fraudulent chargebacks to the issuer. |\n| **Invoice Prefix**  Payments > PayPal > Settings | A site-specific prefix, such as “STORE1-” | Recommended by the vendor to tell each site’s orders apart on a shared PayPal account. |\n| **Instant payments only**  Payments > PayPal > Settings | On for downloads or same-day shipping | Blocks funding sources that take extra time to clear, such as eChecks. |\n| **Logging**  Payments > PayPal > Settings > Expert Settings | Off outside troubleshooting | Logs record your exchanges with PayPal in detail; no need to keep piling them up once the issue is fixed. |\n| **Include connection credentials**  Payments > PayPal > Settings > Expert Settings, Blueprint export | Unchecked (the default) | With credentials included, the store that imports the file connects to your PayPal account. |\n\n- Under Settings > Expert Settings, in the Troubleshooting section, run “Simulate webhooks” and confirm the test webhook arrives.\n- Exclude PayPal scripts from minification and the Cart and Checkout pages from caching, then check the buttons in a private window.\n- Before turning on Apple Pay, register your domain with PayPal from the Overview tab.\n- Under Settings > Payments, make sure the old PayPal Standard gateway is no longer active.\n\n## PayPal Payments security: order data and card testing\n\nIts payment endpoints answer without a login, which explains these flaws:\n\n- **June 2023, CVE-2023-35917**: a low-severity [CSRF](https://www.wp-masquerade.com/glossary/csrf/) flaw (CVSS 4.3) affected versions up to 2.0.4, fixed in 2.0.5.\n- **CVE-2025-14073**: an [IDOR](https://www.wp-masquerade.com/glossary/idor/) on the order-received page let unauthenticated visitors obtain order keys, then the customer’s billing details through the Store API. Versions up to 3.3.2, fixed in 3.4.0.\n- **May 2026, CVE-2026-9284**: missing authorization checks on the `ppc-create-order` and `ppc-get-order` endpoints let an unauthenticated visitor tamper with orders and read PayPal order details (CVSS 8.2). Versions up to 4.0.1, fixed in 4.0.2.\n\nWhat to do: stay on the latest release, 4.0.2 at the very least, apply patch releases promptly and back up before a major version. Card testing remains the everyday risk: turn on reCAPTCHA protection and read our WooCommerce store security guide. With WP Masquerade Pro, the plugin’s folder address and script IDs no longer name it, but the SDK loaded from paypal.com, its JavaScript variables and its ppcp-\\* classes remain visible.\n\n## WooCommerce PayPal Payments FAQ\n\n**Do I need a PayPal business account?**\n\nA personal account is enough to connect and get paid, but subscriptions require a business account. Some features, such as saved payment methods, also require your account to be eligible.\n\n**The PayPal buttons disappeared after an update. What should I do?**\n\nClear every cache first (plugin, server, CDN) and exclude PayPal scripts from minification. If that fails, test on a staging copy with other plugins turned off.\n\n**Can I use PayPal Payments alongside Stripe?**\n\nYes: you can keep Stripe for cards and enable only PayPal and Pay Later in PayPal Payments. Turn off cards on the Payment Methods tab so shoppers don’t see two card forms.\n\n**Does the reCAPTCHA protection cover the whole store?**\n\nNo. According to the documentation, it covers only PayPal’s payment endpoints, including cards processed by PayPal. Other gateways and the registration form need their own protection.\n\n## Key facts\n\n- Category: E-commerce\n- Vendor: WooCommerce\n- Price: Free; PayPal charges fees on each transaction, depending on country and payment method\n- Active installations (wordpress.org): 800 000+\n- Version: 4.2.0\n- Official page: https://wordpress.org/plugins/woocommerce-paypal-payments/\n\n## What WP Masquerade hides\n\n- Handled by WP Masquerade Pro only\n- With Pro: folder name, tag IDs\n- Still visible: JavaScript variables, CSS classes, files served by the vendor",
    "catalog": "wc-paypal",
    "essentials": [
        "Best for taking PayPal, Pay Later, cards and local methods through a single provider.",
        "Main caveat: advanced cards and saved payment methods depend on your country and PayPal approval.",
        "Free plugin; PayPal charges a fee on each transaction, varying by country and payment method."
    ],
    "format": "application/json"
}