Flexible Quantity – Measurement Price Calculator for WooCommerce Security & Risk Analysis

The plugin "flexible-quantity-measurement-price-calculator-for-woocommerce" v2.3.15 presents a mixed security posture. On the positive side, it has no known vulnerabilities (CVEs) and demonstrates good practices like utilizing prepared statements for a majority of its SQL queries and implementing nonce and capability checks on its entry points. The attack surface appears minimal and protected, with no REST API routes or cron events found, and the identified AJAX handler and shortcode are not explicitly listed as unprotected.

However, the static analysis reveals several significant concerns. The presence of dangerous functions such as 'assert', 'unserialize', 'proc_open', and 'shell_exec' is a red flag, indicating potential avenues for code execution or deserialization vulnerabilities if input is not rigorously sanitized. Furthermore, the taint analysis highlights two flows with unsanitized paths, rated as high severity, which could lead to the exploitation of these dangerous functions or other injection-like vulnerabilities. The fact that only 40% of output is properly escaped also raises concerns about potential cross-site scripting (XSS) vulnerabilities.

The plugin's vulnerability history is a strength, showing no recorded CVEs. This suggests either a historically secure codebase or potentially limited discovery of vulnerabilities, rather than an inherent guarantee of current security. In conclusion, while the plugin has a clean history and some good security implementations, the identified dangerous functions, unsanitized taint flows, and insufficient output escaping warrant careful attention and remediation.