Planet Studio Payment Gateway for ArCa Security & Risk Analysis

The arca-payment-gateway plugin version 1.5.2 exhibits a mixed security posture. On the positive side, it demonstrates excellent practices in output escaping, with all 454 outputs properly escaped, and the majority of SQL queries (82%) utilize prepared statements. The absence of file operations and dangerous functions is also a strength. However, significant concerns arise from the identified attack surface and taint analysis.

Specifically, the plugin exposes two AJAX handlers without authentication checks, creating potential entry points for unauthorized actions. The taint analysis reveals a concerning 15 high-severity flows with unsanitized paths, indicating a strong possibility of vulnerabilities that could allow attackers to manipulate data or code execution. While the plugin has a history of vulnerabilities, particularly CSRF, the current lack of unpatched CVEs is a positive sign, suggesting active maintenance, though the previous occurrences warrant vigilance. The single nonce check is insufficient to cover all potential attack vectors.

In conclusion, while the plugin has adopted good practices in output sanitization and SQL query preparation, the unprotected AJAX endpoints and the high number of unsanitized taint flows present a substantial risk. The vulnerability history, though currently clear of unpatched issues, suggests a pattern that requires ongoing monitoring. Addressing the unprotected entry points and the identified taint flows should be a priority to improve the plugin's overall security.