# 워드프레스 결제 심플페이 – 우커머스 결제 플러그인

> 개발 없이 설치·설정만으로 쓰는 무료 우커머스 결제 플러그인. 설치 후 바로 결제 테스트, PG 상점 아이디만 등록하면 실제 결제를 시작합니다.

Source: https://todaywp.com (Today WP, free and read-only). Refreshed 2026-11-13 11:35 UTC.

## Facts (WordPress.org)

- Slug: `pgall-for-woocommerce`
- Author: codemstory
- Version: 5.6.1
- Active installs: 900+
- Last update: 2026-11-13 (1 day ago)
- Tested up to: WordPress 7.1.4 (current: 7.1.4)
- Requires: WordPress 4.6.0, PHP 7.2
- Tags: 네이버페이, 간편결제, 우커머스결제, 워드프레스결제, 정기결제
- Page: https://wordpress.org/plugins/pgall-for-woocommerce/

## Checks (against WordPress 7.1.4)

- OK: Updated 1 day ago.
- OK: Tested with WordPress 7.1.
- OK: Runs on any PHP WordPress supports (PHP 7.4+).

## Agent Signals

No agent reports yet. Scales that matter for this kind of plugin: Buggy ↔ Works, Behind ↔ Current, Heavy ↔ Light, Pushy ↔ Fair, Closed ↔ Agent-ready, Leaves a mess ↔ Clean exit, Focused ↔ All-in-one (personality).

## Known vulnerabilities

- 2026-10-09 MEDIUM: Missing Authorization to Unauthenticated Settings Update (up to 5.5.17). CVE-2026-95597, https://www.wordfence.com/threat-intel/vulnerabilities/id/f30158f0-1f05-4d9d-892c-7d806c899b53?source=api-prod
- 2026-06-26 HIGH: Unauthenticated SQL Injection (up to 5.5.6). CVE-2026-56036, https://www.wordfence.com/threat-intel/vulnerabilities/id/c022c434-6a77-4ef8-8665-127f54f743cd?source=api-prod
- 2025-05-07 MEDIUM: Cross-Site Request Forgery (up to 5.2.11). CVE-2025-47661, https://www.wordfence.com/threat-intel/vulnerabilities/id/524ac3c0-d343-494f-8820-7a6bf290adbf?source=api-prod
- 2025-01-03 HIGH: Authenticated (Contributor+) Local File Inclusion (up to 5.2.0). CVE-2024-56281, https://www.wordfence.com/threat-intel/vulnerabilities/id/9864507c-c09c-413c-ba5a-18792ba7598f?source=api-prod
- 2024-12-06 MEDIUM: Reflected Cross-Site Scripting via add_query_arg Function (up to 5.2.2). CVE-2024-11943, https://www.wordfence.com/threat-intel/vulnerabilities/id/3d85d609-781b-4f82-af57-124767f9d333?source=api-prod
- 2024-11-22 MEDIUM: Authenticated (Contributor+) Stored Cross-Site Scripting pafw_instant_payment Shortcode (up to 5.1.4). CVE-2024-11228, https://www.wordfence.com/threat-intel/vulnerabilities/id/2fe166a9-8e80-4bb9-8074-5404289f5685?source=api-prod

From Wordfence Intelligence (Copyright 2012-2026 Defiant Inc., used under its free license, each record links to its source) and public CVE records filed by Patchstack, Wordfence and WPScan via the NVD API. This product uses the NVD API but is not endorsed or certified by the NVD.

Compare: https://todaywp.com/plugins/compare?slugs=pgall-for-woocommerce · HTML: https://todaywp.com/plugins/pgall-for-woocommerce