Forms Security & Risk Analysis

The "forms-by-made-it" plugin version 2.9.0 presents a mixed security posture. While it demonstrates good practices in output escaping, with 84% of outputs properly handled, and avoids the use of dangerous functions, several significant concerns arise from the analysis. The presence of 3 unprotected AJAX handlers and 2 taint flows classified as high severity indicate potential avenues for attack where user input might not be adequately validated or sanitized, leading to vulnerabilities like cross-site scripting or unauthorized actions. The plugin's vulnerability history is also a notable concern, with 3 known CVEs, including one critical and one high severity vulnerability, and critically, one unpatched vulnerability. The nature of past vulnerabilities, specifically "Unrestricted Upload of File with Dangerous Type" and "Cross-site Scripting," aligns with the identified taint flow issues, suggesting a recurring pattern of input handling weaknesses. The high number of SQL queries without prepared statements (0%) is another critical oversight that exposes the application to SQL injection risks. Despite the plugin's strengths in output escaping and absence of inherently dangerous functions, the combination of unprotected entry points, high-severity taint flows, a history of critical and high vulnerabilities, and a significant lack of SQL statement preparation points to a substantial risk that requires immediate attention and mitigation.