Easy Calculation Forms Security & Risk Analysis

The "easy-pricing-forms" plugin v1.2.13 exhibits a mixed security posture. On the positive side, there are no known CVEs, no bundled libraries, and all detected SQL queries utilize prepared statements, indicating good practices in data handling and a clean vulnerability history. However, significant concerns arise from the static analysis, particularly regarding output escaping, where only 8% of outputs are properly escaped. Furthermore, the taint analysis reveals two flows with unsanitized paths, although they did not reach critical or high severity levels in this analysis. The absence of nonce checks and a lack of capability checks on entry points, despite a zero attack surface being reported, warrants further investigation if any entry points were present and not detected. The file operations (10) and external HTTP requests (1) also represent potential vectors for exploitation if not handled with extreme care, especially given the low rate of output escaping.