CoSchool LMS – A complete Learning Management System to Create and Sell Your Courses Online Security & Risk Analysis

The "coschool" plugin v1.4.3 presents a significant security risk due to its extensive attack surface and a history of severe vulnerabilities. A concerning 25 AJAX handlers lack authentication checks, creating numerous direct entry points for attackers. This is exacerbated by 6 high-severity taint flows with unsanitized paths, indicating potential for code execution or data manipulation if an attacker can control the input to these flows. The presence of the `unserialize` function, a known dangerous function, further amplifies the risk of deserialization vulnerabilities, especially when combined with unsanitized input.

The plugin's vulnerability history is particularly alarming, with 3 known CVEs, all of which remain unpatched. This includes one critical and one high-severity vulnerability, along with a medium one. The common types of these past vulnerabilities – SQL Injection, Deserialization of Untrusted Data, and Missing Authorization – directly align with the critical findings from the static analysis. This pattern suggests recurring security flaws that have not been adequately addressed, indicating a lack of consistent security patching and development practices.

While the plugin demonstrates some good practices, such as using prepared statements for most SQL queries and a high percentage of properly escaped output, these strengths are heavily overshadowed by the critical security concerns. The large number of unprotected AJAX endpoints, coupled with the history of unpatched critical vulnerabilities and the presence of dangerous functions, makes this plugin a high-risk component. It is strongly recommended to avoid using this plugin until all identified vulnerabilities are patched and a thorough security audit is conducted.