EasyTest – Simplify A/B Testing Security & Risk Analysis

The ConvertPro plugin exhibits a mixed security posture. While it demonstrates good practices in SQL query preparation and output escaping, a significant concern lies in its attack surface, particularly the high number of AJAX handlers lacking proper authentication checks. The taint analysis further highlights this by identifying a substantial number of flows with unsanitized paths, including five deemed high severity. This suggests a potential for attackers to exploit these entry points to manipulate data or execute unintended actions. The plugin's vulnerability history, despite a recent medium severity vulnerability, indicates a pattern of missing authorization, reinforcing the concerns raised by the static analysis. While the absence of critical vulnerabilities and a generally good approach to prepared statements and escaping are strengths, the unaddressed AJAX handlers and unsanitized taint flows represent immediate and significant risks that require urgent attention.