Advanced Forms for ACF Security & Risk Analysis

The "advanced-forms" plugin v1.9.3.7 presents a concerning security posture. While it has no currently unpatched CVEs, its vulnerability history reveals a pattern of critical security flaws, specifically Missing Authorization and Authorization Bypass Through User-Controlled Key. This suggests a recurring weakness in how the plugin handles user permissions and access control.

The static analysis highlights significant security risks. A substantial portion of the attack surface, specifically 3 out of 4 entry points (all AJAX handlers), lacks proper authentication checks. This makes these handlers vulnerable to unauthorized access and potential exploitation. Furthermore, the plugin exhibits poor output escaping practices, with only 12% of outputs being properly escaped, increasing the risk of Cross-Site Scripting (XSS) vulnerabilities. The presence of unsanitized paths in taint analysis flows, even without critical or high severity identified, warrants caution as it indicates potential for path traversal or other file-related attacks.

While the plugin does have some security measures in place, such as nonce and capability checks, their limited application across the attack surface is a major concern. The complete absence of prepared statements for its single SQL query is another critical weakness, leaving it susceptible to SQL injection attacks. The history of serious vulnerabilities, combined with the identified weaknesses in authentication, output escaping, and data sanitization, indicates that this plugin requires immediate attention to mitigate potential risks.