Free WooCommerce Theme 99fy Extension Security & Risk Analysis

The '99fy-core' v1.3.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates strong adherence to secure coding practices in several areas, including the complete absence of vulnerable SQL queries and the presence of a healthy number of nonce and capability checks. The fact that all identified AJAX handlers and REST API routes have authorization checks is a significant strength. However, concerns arise from the use of the `create_function` dangerous function, which can be a source of various vulnerabilities if not handled with extreme care. Furthermore, the taint analysis revealing two flows with unsanitized paths, though not classified as critical or high severity, still warrants attention as it indicates potential for unintended data manipulation or exposure. The plugin's vulnerability history shows two past medium-severity CVEs related to Cross-site Scripting and Cross-Site Request Forgery, suggesting a pattern of input sanitization and authorization weaknesses that have been exploited in the past. Although there are currently no unpatched vulnerabilities, this history reinforces the need for vigilance regarding input handling and access control.