After order discounts for woocommerce Security & Risk Analysis

This plugin, 'after-order-discounts-for-woocommerce' version 1.0.4, presents a significant security risk primarily due to its large attack surface without adequate authentication. All nine identified AJAX handlers lack authentication checks, meaning any user, including unauthenticated ones, can trigger these functions. This is a critical concern, as it opens the door to potential unauthorized actions or information disclosure depending on what these AJAX handlers do.

The taint analysis further amplifies these concerns, revealing 7 high-severity flows with unsanitized paths. While no critical or high severity CVEs are recorded for this plugin historically, the current static analysis strongly suggests the presence of vulnerabilities that could be exploited. The lack of capability checks and the limited use of nonces on entry points are also contributing factors to the overall weak security posture. The high percentage of unsafely escaped output (92%) also indicates a risk of Cross-Site Scripting (XSS) vulnerabilities.

Despite the positive signs like the absence of dangerous functions, file operations, and external HTTP requests, and a good percentage of SQL queries using prepared statements, the overwhelming number of unprotected AJAX handlers and high-severity unsanitized flows are major red flags. The plugin's history of no recorded vulnerabilities might be due to its limited adoption or a lack of thorough auditing in the past. However, based on the current analysis, it requires immediate attention to secure its entry points and sanitize all data flows.