Electronic Signature Add-on for Forminator Security & Risk Analysis

The plugin 'forms-digital-signature-forminator-add-on' v1.1.5 exhibits a strong security posture based on the provided static analysis and vulnerability history. The code demonstrates excellent adherence to secure coding practices, with 100% of SQL queries utilizing prepared statements and a high rate of output escaping (95%). The presence of nonce and capability checks further bolsters its defenses against common web attacks. The absence of any recorded vulnerabilities, critical taint flows, or dangerous function usage across its limited entry points is highly commendable.

While the plugin's attack surface is small and appears to be well-protected, a minor area for attention is the single file operation, where the context and sanitization of any file path manipulation would be crucial to assess fully. The lack of external HTTP requests is also a positive indicator. Overall, this plugin presents a low-risk profile, with its strengths in secure coding practices and a clean vulnerability history far outweighing any minor potential concerns.