Ghost Kit – Page Builder Blocks, Motion Effects & Extensions Security & Risk Analysis

Ghostkit v3.5.1 exhibits a generally positive security posture, with strong adherence to several best practices. The plugin demonstrates excellent SQL query sanitization, utilizing prepared statements exclusively, and a high percentage of properly escaped output. The limited attack surface, with only one AJAX handler and no unprotected entry points, is also a positive indicator. Furthermore, the presence of numerous capability checks suggests an effort to restrict access to sensitive functionality.

However, the static analysis reveals some areas of concern. Two flows with unsanitized paths were identified, which, despite not being classified as critical or high severity in the taint analysis, could potentially lead to local file inclusion vulnerabilities if the input is not properly validated downstream. The plugin's history of Common Vulnerabilities and Exposures (CVEs), particularly those related to Cross-site Scripting and PHP Remote File Inclusion, is a significant red flag. Although there are currently no unpatched CVEs, the recurring nature of these vulnerability types indicates a persistent risk and suggests that thorough security reviews and input sanitization across all user-controllable data points are crucial.

In conclusion, Ghostkit v3.5.1 benefits from robust SQL handling and a contained attack surface. Nevertheless, the identified unsanitized paths and the historical prevalence of critical vulnerability types like XSS and RFI warrant careful consideration. While the current version appears to have addressed past vulnerabilities, the plugin's history suggests a need for ongoing vigilance and rigorous testing to ensure that new vulnerabilities are not introduced.