eShipper Commerce Security & Risk Analysis

The eshipper-commerce plugin v2.16.12 exhibits a concerning security posture primarily due to a large, unprotected attack surface. All 13 identified entry points, including AJAX handlers and REST API routes, lack proper authentication and permission checks. This means any user, even unauthenticated ones, could potentially interact with these functions, leading to unauthorized actions or data exposure. The lack of nonce checks on AJAX handlers further exacerbates this risk, as it opens the door to Cross-Site Request Forgery (CSRF) attacks. While the static analysis did not reveal dangerous functions or critical taint flows, the high percentage of improperly escaped output (62%) suggests a significant risk of Cross-Site Scripting (XSS) vulnerabilities across various outputs. The plugin's history of zero known vulnerabilities might suggest good development practices in the past or a lack of targeted analysis, but it does not negate the current, evident code-level risks. The substantial number of SQL queries that do not utilize prepared statements (76%) also poses a serious risk of SQL injection vulnerabilities. The plugin's strength lies in its absence of bundled libraries and file operations, which avoids common attack vectors associated with those areas. However, the critical weaknesses in authentication, authorization, and output escaping, coupled with the SQL injection risks, present a substantial security risk that requires immediate attention.