Add to Cart Redirect for WooCommerce Security & Risk Analysis

This plugin exhibits a mixed security posture, with some strong security practices but also notable areas of concern. The extensive use of prepared statements for SQL queries and a high percentage of properly escaped output are positive indicators of secure coding. However, the presence of 10 AJAX handlers, with a significant 8 lacking authentication checks, presents a considerable attack surface. The taint analysis revealing unsanitized paths, though not reaching critical or high severity in this scan, warrants attention as it indicates potential for input manipulation. The plugin's vulnerability history shows one known CVE, classified as medium, and a past instance of Cross-Site Scripting, which, while patched, suggests a historical tendency for input sanitization issues. Overall, the lack of robust authentication on a substantial portion of its AJAX endpoints is the most pressing concern, overshadowing the otherwise good practices in data handling and SQL.