Fusion Page Builder : Extension – Gallery Security & Risk Analysis

The "fusion-extension-gallery" plugin v1.7.7 exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and having no file operations or external HTTP requests. The output escaping is also at a respectable 84%, and it correctly implements nonce and capability checks on some entry points.

However, there are significant concerns. The plugin exposes two AJAX handlers without any authentication checks, creating a direct attack vector. While taint analysis shows no critical or high severity flows, one unsanitized path was identified, which could potentially lead to vulnerabilities if exploited in conjunction with other weaknesses.

The vulnerability history reveals one past CVE, specifically Cross-site Scripting, which is a common and potentially severe type of vulnerability. While this CVE is currently patched, its existence indicates a past susceptibility that users should be aware of. The plugin's static analysis shows a moderate attack surface with a couple of unprotected entry points. Coupled with the high percentage of properly escaped outputs, the past XSS vulnerability might be addressed, but the unprotected AJAX handlers remain a clear and present risk.