Academy Elementor Addons Security & Risk Analysis

The 'academy-elementor-addons' plugin v1.3.4 exhibits a mixed security posture. While it shows good practices in output escaping (87%) and has no recorded vulnerability history, several areas of concern are present. A significant portion of its attack surface, specifically 4 out of 7 AJAX handlers, lack authentication checks. This could expose sensitive functionality to unauthenticated users. The presence of a single SQL query that is not prepared raises a potential risk of SQL injection if that query handles user-supplied data without proper sanitization, even though taint analysis did not reveal any flows. The plugin also has limited nonce and capability checks for its entry points, further contributing to the potential for unauthorized access.

Despite the lack of critical or high severity findings in taint analysis and its clean vulnerability history, the unprotected AJAX handlers and the un-prepared SQL query are notable weaknesses. The absence of known vulnerabilities is a positive indicator of developer diligence or perhaps a lower profile that has not attracted attackers. However, the structural weaknesses in handling entry points and database queries necessitate caution. Overall, the plugin has strengths in code sanitization and a clean historical record, but the identified attack surface vulnerabilities require remediation to achieve a more robust security profile.