Discontinued Products Security & Risk Analysis

The "discontinued-products" v2.0.8 plugin exhibits a generally good security posture based on the provided static analysis. The plugin has a very small attack surface, with only one shortcode, and crucially, no unprotected entry points like AJAX handlers or REST API routes. The code also shows a strong tendency towards proper output escaping, with 90% of outputs being sanitized. The presence of a nonce check, while only one, indicates some consideration for preventing CSRF attacks. The absence of file operations and external HTTP requests further reduces potential attack vectors.

However, there are areas of concern. The most significant is the use of raw SQL queries. With two SQL queries identified and 0% using prepared statements, this poses a substantial risk of SQL injection vulnerabilities. While taint analysis did not reveal any immediate unsanitized flows, the lack of prepared statements means that any user-supplied input that is incorporated into these queries without proper sanitization could be exploited. The lack of capability checks on the shortcode is also a weakness, as it implies that any authenticated user, regardless of their role, can potentially execute the shortcode's functionality.

Historically, the plugin has no recorded vulnerabilities, which is a very positive sign. This suggests either a well-written codebase or diligent maintenance. However, the lack of historical vulnerability data does not negate the risks identified in the current static analysis, particularly the raw SQL queries and the absence of capability checks.