A CBD payment gateway for WooCommerce is a gateway plugin, usually the official Authorize.Net extension or an NMI plugin, connected to a merchant account whose bank has approved hemp-derived CBD. It replaces WooPayments, which WooCommerce says cannot be used for CBD. Your store has to be self-hosted, because WooCommerce stores on WordPress.com or Pressable may only use Square or Viva.com, and Square told sellers to remove CBD and hemp items by October 15, 2026.
If you build or run the store, the order matters: account first, then the plugin, then the settings that decide your PCI scope and whether subscriptions renew on their own. Getting these steps out of order can mean reconfiguring your checkout later. If you are scaling a CBD brand on WooCommerce, the same order keeps a growing order volume on an account that will still be there next year.
The Short Version
- WooPayments, Stripe and PayPal are not a home for CBD on WooCommerce, and Square’s cutoff passed on October 15, 2026.
- Use Authorize.Net or NMI on a merchant account approved for hemp-derived CBD.
- Self-host WooCommerce: WordPress.com and Pressable CBD stores are limited to Square or Viva.com.
- Test a subscription renewal before launch. Automatic renewals depend on the plugin.
Which Payment Gateways Work for a WooCommerce CBD Store?
The payment gateways that work for a WooCommerce CBD store are standalone gateways, mainly Authorize.Net and NMI, running on a CBD-approved merchant account. The gateway connects your WooCommerce checkout to the payment processing system. The account behind it is what has to approve CBD. Here is how the WooCommerce options compare as of October 2026.
| Option | Works for CBD? | WooCommerce plugin | Automatic subscription renewals |
|---|---|---|---|
| Authorize.Net | Yes, on a merchant account approved for CBD | Official extension on WooCommerce.com, $79 a year | Supported (needs tokenization and CIM) |
| NMI | Yes, through a provider whose bank approves CBD | Third-party plugins on WordPress.org | Several plugins list support; test it |
| Payment Nerds CBD gateway setup | Yes, once your account is approved | Authorize.Net extension or an NMI plugin, set up for you | Confirmed during setup |
| WooPayments | No. WooCommerce says it cannot be used for CBD | Built in | n/a for CBD |
| Stripe | Restricted. Needs Stripe’s review; CBD over the local THC limit is prohibited | Official extension | n/a for most CBD stores |
| PayPal Payments | No published CBD program | Official extension | n/a for CBD |
| Square | No. CBD and hemp items had to go by October 15, 2026 | Official extension | n/a for CBD |
Authorize.Net is the simpler choice for most stores, because its WooCommerce extension is sold and supported through the WooCommerce Marketplace. NMI suits stores that want more control, such as routing between merchant accounts, but its WooCommerce plugins come from independent developers, so check each plugin’s support for subscriptions, refunds and the block checkout. Our CBD payment gateway guide explains how gateways and merchant accounts fit together.
Why Won’t WooPayments or Square Work for a CBD Store?
WooPayments and Square will not work for a CBD store because both bundle the gateway with their own merchant account, and neither account accepts CBD in 2026. WooCommerce’s CBD page says it is not possible to use WooPayments to sell CBD and hemp-derived products. Square was the U.S. program WooCommerce pointed CBD stores to, until Square told sellers to remove CBD and hemp items by October 15, 2026. Stripe lists CBD with negligible THC as a restricted business that needs its review, and PayPal publishes no CBD program.
Built-in WooCommerce payments
- One sign-up for the gateway and the account
- The provider’s policy decides what you can sell
- WooPayments, Stripe, PayPal and Square exclude or restrict CBD
- A policy change switches off the whole checkout
Gateway on a CBD merchant account
- The plugin and the account are separate
- A bank that has reviewed hemp-derived CBD holds the account
- Authorize.Net or NMI on WooCommerce
- You can change one without rebuilding the other
There is one hosting trap worth checking before you build anything. WooCommerce’s page says stores hosted on WordPress.com or Pressable must use Square or Viva.com for CBD, and Viva.com’s program covers only a few European countries. With Square gone, a U.S. CBD store on WordPress.com has no supported payment option. Self-hosted WooCommerce on a host of your choice can use any gateway, and WooCommerce says CBD stores can still use services such as Jetpack and WooCommerce Tax.
What Do You Need Before You Install a WooCommerce CBD Payment Gateway?
Before you install a WooCommerce CBD payment gateway, have these ready:
- An approved CBD merchant account with your gateway credentials.
- A self-hosted WooCommerce store, not WordPress.com or Pressable.
- An SSL certificate, which the Authorize.Net extension requires.
- Current WordPress, WooCommerce and PHP versions that meet the plugin’s requirements.
- Product pages with lab reports and your refund, shipping and privacy policies.
- A staging site for test orders.
The merchant account usually takes the longest, so start there.
How Do You Set Up a CBD Payment Gateway in WooCommerce?
To set up a CBD payment gateway in WooCommerce, install the gateway’s extension, connect your credentials in test mode, choose your payment form and tokenization settings, and run test orders before you switch to production. These steps follow the official Authorize.Net for WooCommerce documentation; NMI plugins follow the same pattern with a private and public security key.
Get your CBD merchant account approved
Apply with your product list, current certificates of analysis (lab reports) and store policies. Our CBD merchant account guide lists what underwriters ask for.
Install the extension
Buy the Authorize.Net extension on WooCommerce.com, or install an NMI plugin such as the PCI Gateway for NMI, and activate it.
Connect your credentials in test mode
In Authorize.Net, create an API Login ID and Transaction Key (plus a Signature Key if you want webhooks). Paste them under WooCommerce > Settings > Payments, with Environment set to Test and sandbox credentials.
Choose the payment form
Authorize.Net’s Lightbox form supports PCI SAQ A, and the Inline form supports SAQ A-EP. Pick the one that matches the PCI scope you want.
Turn on tokenization
Saved cards, subscriptions and pre-orders need tokenization, which stores each card as a secure token instead of the card number, and Authorize.Net’s Customer Information Manager must be enabled on your account. It can carry a monthly fee.
Set fraud rules and go live
Require the card security code, set address checks and velocity limits, and turn off Partial Authorization in Authorize.Net. Then switch Environment to Production with live credentials.
Before you go live
- A test order, a refund and a void from the WooCommerce order screen all work
- A subscription order renews automatically on a test schedule, if you sell subscriptions
- The billing descriptor matches your store name
- Order emails, lab-report links and your policies show at checkout
If you also sell on Shopify or in a shop, the same merchant account can cover those channels. See our guide to CBD payments on Shopify and our Shopify POS for CBD retail guide.
How Do WooCommerce Subscriptions Work With a CBD Payment Processor?
WooCommerce Subscriptions can renew CBD orders automatically only when your CBD payment processor’s WooCommerce plugin supports automatic payments. Otherwise every renewal becomes a manual order the customer has to pay. WooCommerce’s gateway list includes Authorize.net among the Marketplace gateways with automatic renewals. For plugins from outside WooCommerce.com, including the NMI plugins, WooCommerce says not to assume automatic payments and to check with the developer.
Subscription renewal settings may not update automatically
A subscription keeps the renewal method it started with. If a customer signed up while your gateway could only handle manual renewals, that subscription stays manual even after you add automatic support, unless you let subscribers change their renewal mode in My Account.
Clear renewal terms matter as much as the plugin. Show the price and billing interval at checkout, send a reminder before each renewal and make cancelling easy. Renewals a customer did not expect are one of the main causes of CBD disputes, which our chargeback prevention guide for CBD retailers covers.
Why Is My CBD Payment Gateway Not Working in WooCommerce?
A CBD payment gateway usually stops working in WooCommerce because of a credentials mismatch, a checkout plugin conflict, an account setting at the gateway or a merchant account that is not fully live. Before you change anything, turn on the plugin’s debug mode and read the log under WooCommerce > Status > Logs, because it usually names the problem. These are the fixes for the issues store owners run into most:
The gateway is missing at checkout
Check it is enabled under WooCommerce > Settings > Payments and that the plugin supports the Cart and Checkout blocks, the default since WooCommerce 8.3. If it does not, use the classic checkout shortcode.
Every test payment fails
Test mode needs sandbox credentials, and live credentials will not work in it. Leave Test Mode off inside your Authorize.Net account itself, or no transactions will process at all.
“Payment nonce is missing”
A script conflict is blocking Accept.js. Stop optimization plugins such as Autoptimize, SG Optimizer or Hummingbird Pro from minifying or combining scripts on the checkout page.
Subscription renewals decline
If Authorize.Net requires the card code, renewals fail, because that code cannot be stored. Remove required fields under Account > Payment Form > Form Fields, and confirm tokenization and CIM are on.
Orders are approved but held
Turn off Partial Authorization in your Authorize.Net account. With it on, orders that come back with response codes 4 or 295 may not be approved in WooCommerce.
Live cards decline after launch
Read the decline reason in the order notes. If it points to the account, ask your processor whether your CBD merchant account is fully live and whether its fraud filters are set too tight.
If the log shows the gateway accepting the request but the bank declining it, the fix is on the merchant account side, and your WooCommerce CBD payment gateway provider should be able to tell you why.
What Compliance Settings Does a WooCommerce CBD Store Need?
A WooCommerce CBD store needs compliance settings in five places, and your processor will check most of them before it approves you:
- Product pages: milligrams per container and per serving, the batch number and a link to that batch’s lab report, with no health claims.
- Shipping zones: block the states and countries you cannot ship to. USPS takes hemp products in domestic mail only.
- Age checks: an age gate where your state or product requires one.
- Checkout terms: a required checkbox for your terms, refund and subscription policies.
- Catalog cleanup: remove anything over the 0.4 mg total THC per container cap in Public Law 119-37 before December 11, 2026.
WooCommerce CBD Payment Gateway FAQs
Q: What is the best CBD payment gateway for WooCommerce?
A: For most stores it is Authorize.Net through its official WooCommerce extension, on a merchant account approved for hemp-derived CBD. NMI is a strong alternative for stores that want more control over routing.
Q: Can I use WooPayments for CBD?
A: No. WooCommerce says it is not possible to use WooPayments to sell CBD and hemp-derived products.
Q: Can I sell CBD on a WordPress.com WooCommerce store?
A: Only with Square or Viva.com, according to WooCommerce, and Square no longer allows CBD in the U.S. Self-hosted WooCommerce can use any gateway.
Q: Does Authorize.Net allow CBD?
A: Authorize.Net is gateway software and does not hold your funds. Whether you can process CBD depends on the merchant account behind it, so you need an acquiring bank that has approved your products.
Q: Which PCI questionnaire applies to my WooCommerce CBD store?
A: It depends on the payment form. Authorize.Net’s Lightbox form supports SAQ A and its Inline form supports SAQ A-EP. Since 2025, SAQ A also asks you to confirm your site is protected against malicious scripts.
Q: How long does it take to set up a CBD payment gateway on WooCommerce?
A: Installing and configuring the plugin is the quick part. The merchant account takes longer, because the bank reviews your products, lab reports and website before approval.
Get Help Setting Up a CBD Payment Gateway for WooCommerce
A WooCommerce CBD payment gateway is mostly a matter of order. Get the merchant account approved, keep the store self-hosted, install the official Authorize.Net extension or a well-supported NMI plugin, and test renewals, refunds and the payment form before you launch. Do that, and the checkout is the most stable part of your store.
At Payment Nerds we set WooCommerce CBD stores up with a merchant account underwritten for hemp-derived CBD and an Authorize.Net or NMI gateway connected to it, with tokenization, fraud rules and subscription renewals checked before you go live. If you also sell in person, our guide to online POS for regulated products covers the counter side. Our comparison of the best CBD merchant accounts is a good place to compare providers, and our CBD merchant account team will look at your store and confirm the setup that fits.
Sources
- WooCommerce. “Selling CBD with WooCommerce.” Accessed October 2026.
- WooCommerce. “Authorize.net for WooCommerce” (extension listing). Accessed October 2026.
- WooCommerce. “Authorize.Net for WooCommerce” (documentation). Accessed October 2026.
- WooCommerce. “Subscriptions Payment Gateways.” Accessed October 2026.
- WordPress.org. “Pledged Plugins PCI Gateway for NMI and WooCommerce.” Accessed October 2026.
- Stripe. “Prohibited and Restricted Businesses.” Accessed October 2026.
- PayPal. “Acceptable Use Policy.” Accessed October 2026.
- Marijuana Moment. “Square Tells Businesses To Stop Selling Hemp And CBD Products In Light Of Upcoming Federal Ban.” 2026. Accessed October 2026.
- PCI Security Standards Council. “Important Updates Announced for Merchants Validating to Self-Assessment Questionnaire A.” 2025. Accessed October 2026.
- U.S. Postal Service. “Postal Bulletin 22581: Hemp-based products.” 2021. Accessed October 2026.
- U.S. Congress. “Public Law 119-37” (hemp definition, Sec. 781). Accessed October 2026.
