Boopis WooCommerce RFQ Security & Risk Analysis

The "boopis-woocommerce-rfq" plugin v3.0.9 presents a mixed security posture. While it shows a clean vulnerability history with no known CVEs and no bundled libraries, the static analysis reveals several areas of concern regarding its attack surface and code hygiene. A significant portion of its AJAX handlers, specifically 4 out of 6, lack proper authentication checks, creating potential entry points for unauthorized actions. Furthermore, the plugin's SQL queries are not prepared, indicating a risk of SQL injection vulnerabilities, and a concerning percentage of output is not properly escaped, raising concerns about cross-site scripting (XSS) vulnerabilities.

The taint analysis, while limited in scope with only 3 flows analyzed, did identify one flow with unsanitized paths. Although this flow did not reach a critical or high severity in the analysis, it is indicative of potential issues with how user-supplied data is handled, especially when combined with the lack of prepared SQL statements and unescaped output. The presence of nonce checks and capability checks is a positive sign, demonstrating some awareness of WordPress security best practices. However, the lack of these checks on a substantial number of AJAX handlers, coupled with the unescaped output and raw SQL queries, outweighs the strengths and suggests that the plugin requires significant security improvements to be considered robust.