Plugins / Payments / WooCommerce CyberSource Payment Gateway
WooCommerce CyberSource Payment Gateway
Enterprise CyberSource processing with subscriptions, tokenization and webhooks.

The WooCommerce CyberSource Payment Gateway connects your store directly to CyberSource’s Secure Acceptance and Simple Order (SOAP) APIs. It gives you enterprise-grade card and eCheck processing without leaving your WordPress dashboard.
It’s built for merchants who need PCI-compliant checkout, Level II/III processing, subscription billing, and detailed transaction control. Everything is configured through native WooCommerce settings screens — no custom development required.
Already on CyberSource Unified Checkout (UCO Sessions API)? This plugin also includes UCO digital wallet support (Google Pay, Apple Pay, Click to Pay). But if your integration is UCO-only, see our dedicated Unified Checkout plugin for a lighter, purpose-built setup.
WooCommerce CyberSource Payment Gateway — Key Features
Secure Payment Processing
- Secure, fast, and reliable CyberSource checkout process
- PCI-compliant payment processing
- CyberSource Secure Acceptance Silent Order POST (SOP)
- CyberSource Secure Acceptance Web/Mobile API
- CyberSource Checkout API integration
- CyberSource Hosted Checkout integration
- CyberSource Simple Order API (SOAP)
- Click to Pay via Unified Checkout SDK
- Unified Checkout — Digital Wallets
Digital Wallet Support via Unified Checkout (UCO)
Seamlessly accept modern payment methods including:
- Google Pay
- Apple Pay
- Paze
- Click to Pay (EMV Secure Remote Commerce)
Security & Fraud Protection
- CyberSource Payer Authentication supported
- CyberSource 3D Secure integration
- CyberSource Device Fingerprint ID Profiler
- CyberSource Merchant Notifications
- Secure API logging with automatic card number masking
- Supported integrations: Hosted Checkout & Checkout API
- P12 Certificate authentication support for both SOAP (Simple Order API) and REST API
All security features are built against CyberSource’s own official REST API documentation, so the plugin stays aligned with their current fraud-management and authentication standards.
Subscriptions & Tokenization
- WooCommerce Subscriptions support (new in v2.0)
- Automatic subscription renewals via CyberSource Recurring Billing (SOAP)
- Save card tokenization support (Checkout API / SOP integration)
- Customers can add a payment method from My Account → Payment Methods page
- Saved card UI for both Classic and Blocks checkout
Webhooks & Real-Time Updates
- CyberSource Webhooks for real-time payment notifications
- HTTP POST requests sent when payments are authorized, captured, refunded, or disputed
- Ensures WooCommerce order statuses stay in sync automatically
- Eliminates the need to poll the CyberSource API
Advanced Payment Features
- CyberSource Refunds supported directly from WooCommerce orders
- CyberSource Purchase Level 3 (Visa/MasterCard) support
- Custom Merchant Defined Data (MDD) fields supported via WordPress filters
- Full support for automatic tokenized payments and subscriptions
WooCommerce Compatibility
- WooCommerce Checkout Blocks supported
- Compatible with High-Performance Order Storage (HPOS)
- Compatible with WooCommerce Subscriptions plugin
Easy Configuration
- Simple and manageable plugin settings
- One-click “Set Defaults” buttons to auto-populate Signed Field Names
- Built-in debug logging for easy troubleshooting
Try it before you buy: launch the live Hosted Checkout demo store to see the customer-facing checkout flow.
Video Help
- Demo checkout walkthrough — see the CyberSource checkout flow from the customer’s side
- Full plugin setup tutorial — configuring Secure Acceptance profiles and API keys in WooCommerce
- Plugin installation walkthrough — installing and activating the plugin in WordPress
What’s New in Version 2.5
- P12 certificate authentication for both SOAP (Simple Order API) and REST, with separate live and test certificate fields, a “Test P12 Connection” button, and a warning before a certificate expires.
- SOAP as a full integration type, selectable next to Hosted Checkout and Checkout API, with Blocks checkout, saved cards and My Account payment methods.
- WooCommerce Subscriptions on SOAP, with automatic renewals through CyberSource Recurring Billing.
- REST tokens signed with RS256, the algorithm CyberSource requires for certificate-based REST authentication.
- PHP 8.1 to 8.3 deprecation warnings and compatibility issues fixed.
Version 2.5 is a drop-in update: your Hosted Checkout and Checkout API settings carry over. P12 is optional. To turn it on, export your P12 certificate from the CyberSource Business Center, enter the file and passphrase in the live or test P12 fields, and click Test P12 Connection before switching live traffic.
Frequently Asked Questions
What’s the difference between this plugin and your Unified Checkout plugin?
This plugin covers CyberSource’s Secure Acceptance (SOP, Web/Mobile, Hosted Checkout) and Simple Order (SOAP) APIs. That’s the integration path most merchants with an existing CyberSource account use.
It also supports Unified Checkout digital wallets (Google Pay, Apple Pay, Click to Pay). If your entire integration runs on the newer UCO Sessions API, our dedicated Unified Checkout plugin is a lighter-weight fit.
Does this support both REST and SOAP integrations?
Yes. The plugin supports CyberSource’s REST-based Secure Acceptance and Checkout APIs as well as the legacy Simple Order (SOAP) API, including P12 certificate authentication for both.
Is this compatible with WooCommerce Subscriptions and HPOS?
Yes. The plugin supports WooCommerce Subscriptions with automatic renewals via CyberSource Recurring Billing. It’s fully compatible with High-Performance Order Storage (HPOS) and WooCommerce Checkout Blocks.
What PCI compliance level does this help me meet?
Using Hosted Checkout, Checkout API, or Secure Acceptance SOP keeps card data off your server. That helps you meet SAQ A PCI compliance requirements.
Which integration method should I choose?
Hosted Checkout is the simplest, because card data never touches your server. Checkout API keeps the payment form inside your own checkout page for a more embedded feel. Simple Order (SOAP) suits merchants whose CyberSource account already runs on SOAP.
What do I need to set it up?
An active CyberSource merchant account, plus either a Secure Acceptance profile (Profile ID, Access Key and Secret Key) or REST / SOAP credentials, depending on the integration you pick. The setup guide walks through each one.
Is upgrading to 2.5 a breaking change?
No. Existing settings carry over unchanged, and P12 authentication is only needed if your CyberSource account requires it.




