Experto CTA Widget – Call To Action, Sticky CTA, Floating Button Plugin Security & Risk Analysis

The "experto-cta-widget" v1.2.1 plugin exhibits a mixed security posture. While it demonstrates good practices such as exclusively using prepared statements for SQL queries and a very high rate of output escaping, several concerning areas exist. The primary weakness lies in its attack surface, with 4 out of 5 AJAX handlers lacking authorization checks. This creates a significant vulnerability if these handlers perform sensitive operations that can be triggered by unauthenticated users. The taint analysis, though small in scope, did reveal two flows with unsanitized paths, which could potentially be exploited if they interact with sensitive data or operations, although no critical or high severity issues were found in this area.

The vulnerability history shows one past CVE, which was of medium severity and is now patched. The common vulnerability type being 'Missing Authorization' is a direct red flag that aligns with the static analysis findings of unprotected AJAX handlers. This history suggests a recurring issue with access control within the plugin's development, underscoring the importance of thoroughly securing all entry points. In conclusion, the plugin has strengths in data handling and output sanitization, but the significant number of unprotected AJAX endpoints and the historical pattern of authorization flaws represent considerable risks that need immediate attention.