Foyer – Digital Signage for WordPress Security & Risk Analysis

The "foyer" plugin, version 1.7.6, exhibits a mixed security posture. While it demonstrates strong adherence to secure coding practices in several areas, such as 100% use of prepared statements for SQL queries and a high percentage of properly escaped output, significant concerns arise from its attack surface. All five identified AJAX handlers lack authentication checks, creating a substantial risk for unauthorized actions. Furthermore, the plugin has a history of known vulnerabilities, with one medium-severity Improper Authorization vulnerability remaining unpatched. This pattern suggests a recurring issue with access control within the plugin, which, when combined with the unprotected AJAX endpoints, could be exploited by attackers.

Despite the positive aspects of its code quality regarding SQL and output handling, the lack of authorization checks on critical entry points (AJAX handlers) is a major weakness. The single unpatched medium-severity vulnerability, coupled with the unprotected AJAX handlers, indicates that an attacker could potentially leverage these vulnerabilities to perform unauthorized actions or manipulate plugin behavior. While the taint analysis did not reveal critical or high-severity unsanitized flows, the existing vulnerabilities and the large unprotected attack surface demand immediate attention. The plugin's overall security posture is therefore considered vulnerable due to these critical omissions.