CM Registration – Tailored tool for seamless login and invitation-based registrations Security & Risk Analysis

The "cm-invitation-codes" plugin version 2.5.9 presents a mixed security posture. While it demonstrates good practices like a high percentage of SQL queries using prepared statements and a decent number of nonce and capability checks, several concerning aspects warrant attention. The static analysis reveals a significant attack surface with 6 AJAX handlers, and crucially, 3 of these lack proper authentication checks. This creates direct entry points for unauthenticated users to potentially trigger plugin functionalities. Furthermore, the taint analysis highlights 4 flows with unsanitized paths, indicating a potential for path traversal or arbitrary file read/write vulnerabilities, although no critical or high severity taint flows were identified. The vulnerability history shows 2 past medium severity CVEs, specifically related to Open Redirect and Missing Authorization. The recurrence of "Missing Authorization" in past vulnerabilities aligns with the current finding of unprotected AJAX handlers, suggesting a persistent weakness in access control implementation. Despite the absence of currently unpatched CVEs and the absence of dangerous function usage, the combination of unprotected AJAX endpoints and unsanitized path flows presents a moderate risk that could be exploited by attackers. The plugin's strengths lie in its SQL handling and use of nonces, but these are overshadowed by the direct, unauthenticated entry points and potential path manipulation risks.