EDI – Обмен данными между WooCommerce и 1С Security & Risk Analysis

The e-commerce-data-interchange plugin version 5.1.1 presents a mixed security posture. On the positive side, the plugin demonstrates good practices by utilizing prepared statements for all SQL queries and generally performing output escaping effectively. The absence of any recorded past vulnerabilities or current CVEs is also a strong indicator of a historically secure codebase. However, the plugin has a notable security concern with one of its two AJAX handlers lacking authentication checks. This creates a potential entry point for unauthorized actions if an attacker can trigger this specific AJAX action. While taint analysis shows no current issues, this unprotected entry point remains a significant risk.