Back to home

A real shop on WordPress.
Without writing payment code.

The official DeloPay plugin turns a WordPress site into a store: catalogue, cart, and a hosted checkout card data never leaves.

Most WordPress payment plugins are a gateway bolted onto someone else's commerce platform. This one is the shop. Install it from the plugin directory, connect your DeloPay account in a couple of clicks, add your products, and take payments, with the checkout hosted by us so card details never reach your server.

Free
On the WordPress.org plugin directory
0
Lines of payment code to write
MIT
The integration code is open source
01

A store, not a payment button

The plugin brings its own catalogue, cart and order history. There is no separate commerce platform to install and keep in sync.

Products and categories

Add products with a name, description, price, currency, image, SKU and sort order, and group them into categories. Prices are stored in minor units end to end, so nothing is lost to rounding.

A cart your customers cannot edit

The cart lives in the browser, but every line and total is recalculated against your catalogue on the server before a payment is created. A tampered cart cannot change what gets charged.

Orders, refunds and disputes in wp-admin

Refund in full or in part without leaving WordPress. A background job re-checks refund state every 15 minutes, so the order list matches the provider instead of drifting. Disputes are listed read-only, straight from the API.

The pages are made for you

Activating the plugin provisions the shop, cart, checkout and order-complete pages. A fresh site has a working storefront before you have configured anything.

02

A checkout that never touches your server

Card details are entered inside the DeloPay-hosted checkout, whether you embed it or redirect to it. Your WordPress server and database never see them.

Embedded or redirect

Render the checkout in an iframe on your own page, or send the shopper to a DeloPay-hosted page. It is one setting, and the rest of the flow is identical.

Card data stays out of WordPress

PAN and CVV are typed into the hosted checkout, not into your site. Nothing sensitive is stored in your database, which is the whole point of hosting it on our side.

Authorize now, capture later

Take an authorization at checkout and capture or cancel it per order from the admin, for anything you need to confirm before you charge.

Every method your account has

The plugin has no provider list of its own. Whatever you have connected in the Control Center, cards, wallets, bank redirects or crypto, appears in the same checkout.

03

Connected in a couple of clicks

No copying secrets between browser tabs, and no key ever reaching the front end.

One-click pairing

Start the connect flow from the settings screen and approve it in the Control Center. The plugin tests the credentials against the API before it saves them, so a bad paste fails immediately instead of at the first sale.

Keys stay server-side

The API key is held in WordPress options and sent from PHP. It is never exposed to the browser. You can also inject it through constants and keep it out of the database entirely.

Signed, replay-proof webhooks

Every callback is verified with HMAC-SHA512 in a constant-time comparison before anything is written, and events that arrive twice are recognised and ignored.

Leave cleanly

Disconnecting revokes the API key remotely, not just locally. Uninstalling drops the plugin's tables and options and leaves nothing behind.

Configuration example

Drop it into your stack

The plugin builds the shop pages for you, but every piece is a shortcode you can drop anywhere in your theme.

html
                <!-- A product grid, on any page -->
[delopay_products]

<!-- A single product -->
[delopay_product]

<!-- Cart and hosted checkout -->
[delopay_cart]
[delopay_checkout]
              
How it works

From signup to first transaction

From a blank WordPress site to a live checkout, without touching a payment API.

01

Install the plugin

Search for DeloPay under Plugins, Add New. Activating it creates the shop pages.

02

Connect your account

Start the connect flow from the DeloPay settings screen and approve it in the Control Center.

03

Add your products

Add products and categories in wp-admin, or import them from JSON if you already have a catalogue.

04

Take a payment

The shop is live. Orders, refunds and disputes all land back in wp-admin.

FAQ

Frequently asked questions

Common questions about WordPress: getting started, security, integrations and more.

Do I need WooCommerce?
No. The plugin is a storefront in its own right, with its own products, categories, cart and orders. It is not a WooCommerce payment gateway and it does not need WooCommerce installed.
Does card data touch my WordPress site?
No. Card details are entered inside the DeloPay-hosted checkout, whether you embed it in an iframe or redirect to it. PAN and CVV never reach your WordPress server or database.
Which payment methods can I accept?
Whatever you have connected in your Control Center. The plugin opens the same hosted checkout as every other DeloPay integration, so cards, wallets, bank redirects and crypto all behave the same way.
What does the plugin deliberately not do?
It is small on purpose. There is no shipping, tax, coupon, inventory or product-variant handling, no customer accounts, and no order emails. If you need a full commerce platform, run one and integrate DeloPay through the API instead.
Is there a theme?
Yes. DeloPay Shop is a companion theme built around the plugin, with brand, colour, typography and layout controls in the WordPress Customizer. It is optional, the plugin works with any theme, and it installs from a zip rather than the theme directory.
What are the requirements?
PHP 7.4 or newer, WordPress 6.0 or newer, HTTPS on the front end, and a DeloPay merchant account. The WordPress integration code is MIT-licensed; the DeloPay platform behind it is commercial.

Ready to get started?

Get started in minutes with our comprehensive documentation.