3D Product configurator for WooCommerce Security & Risk Analysis

The Expivi plugin version 2.15.6 presents a mixed security posture. While it demonstrates good practices by utilizing prepared statements for all SQL queries and a high percentage of output escaping, significant concerns arise from its attack surface. The presence of 17 AJAX handlers, with two lacking authentication checks, exposes potential entry points for unauthorized actions. The absence of capability checks further exacerbates this risk, meaning any user, regardless of their role, could potentially trigger these unprotected AJAX actions.

The static analysis did not reveal any critical or high severity taint flows, which is a positive sign. However, the lack of taint analysis flows analyzed (0 total) means this aspect of the code has not been thoroughly scrutinized for more subtle vulnerabilities. The plugin's vulnerability history shows one medium severity CVE related to path traversal, which was patched. This history, combined with the unprotected AJAX endpoints, suggests a pattern where input sanitization and authorization might be areas requiring more rigorous attention.

In conclusion, Expivi 2.15.6 has strengths in its database interaction and output handling. However, the unprotected AJAX handlers are a critical weakness that needs immediate attention. The limited taint analysis and the historical path traversal vulnerability indicate that input validation and proper authorization remain areas of concern for this plugin.