Formentor – Elementor Form Plus Security & Risk Analysis

The "formentor-elementor-form-plus" v1 plugin exhibits a concerning security posture, primarily due to a significant attack surface with no authentication checks on its AJAX handlers. While the plugin demonstrates good practices in SQL query handling and avoids dangerous functions and file operations, the lack of authorization on its entry points is a major weakness. The static analysis reveals 4 AJAX handlers, all of which lack authentication, presenting a direct pathway for unauthorized actions if vulnerabilities exist within them. Taint analysis, while not revealing critical or high severity issues, did identify flows with unsanitized paths, which, when combined with unprotected entry points, could potentially lead to exploitation. The plugin's vulnerability history is clean, with no recorded CVEs. This absence of historical vulnerabilities could indicate diligent development or simply a lack of past discovery. However, the current code analysis strongly suggests that the unprotected AJAX endpoints are the most significant risk, potentially allowing attackers to trigger plugin functionality without proper authorization.