Addi – Cuotas que se adaptan a ti Security & Risk Analysis

The "buy-now-pay-later-addi" v2.0.4 plugin exhibits a mixed security posture. While it has a clean vulnerability history with no known CVEs, the static analysis reveals several concerning aspects. The plugin has a single entry point via an AJAX handler that lacks authentication checks, presenting a significant attack vector. Furthermore, taint analysis indicates three high-severity flows with unsanitized paths, suggesting potential for injection vulnerabilities. The low percentage of properly escaped output (20%) and the absence of nonce checks on the unprotected AJAX handler amplify these risks, as they could allow for cross-site scripting (XSS) or other client-side attacks.

The plugin does demonstrate some good practices, such as the majority of SQL queries using prepared statements, which mitigates SQL injection risks in those instances. However, the presence of unsanitized paths in taint analysis and the unprotected AJAX endpoint are critical weaknesses that outweigh these strengths. The lack of any recorded vulnerabilities in its history might suggest a lack of targeted attacks or a recent discovery of these issues. Overall, the plugin requires immediate attention to address the unprotected entry point and the identified high-severity taint flows.