easypay Gateway Checkout for WooCommerce Security & Risk Analysis

The "easypay-gateway-checkout-wc" plugin v1.1.4 exhibits a mixed security posture. While it demonstrates good practices like using prepared statements for all SQL queries and has no recorded vulnerabilities, several areas raise concern. The presence of unprotected AJAX handlers and a REST API route without permission callbacks significantly increases the attack surface. Furthermore, a substantial portion of output is not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if user-controlled data is involved in those outputs. The lack of historical vulnerabilities is positive, suggesting developers are likely addressing issues, but the current static analysis highlights immediate risks that need attention, particularly the unprotected entry points and potential for XSS.