Interactive Real Estate – Floor Plan & Building Visualizer Security & Risk Analysis

The "interactive-real-estate" v2.2.1 plugin exhibits a concerning security posture due to a significantly exposed attack surface. While the code demonstrates good practices in SQL query handling and output escaping, the lack of authentication checks on a large number of AJAX handlers is a major red flag. With 48 out of 50 total entry points being unprotected AJAX endpoints, this plugin presents a substantial risk of unauthorized access and potential exploitation.

The static analysis reveals that all 8 analyzed taint flows involve unsanitized paths. Although no critical or high severity taint flows were identified, this indicates that user-supplied data could potentially be manipulated to affect application behavior or access unintended resources. The absence of nonce checks on these numerous AJAX handlers further exacerbates the risk of Cross-Site Request Forgery (CSRF) attacks, allowing attackers to trick authenticated users into performing unintended actions.

The plugin's vulnerability history is currently clean, with no recorded CVEs. This is a positive indicator, suggesting that past development might have prioritized security. However, the current static analysis findings, particularly the unprotected AJAX handlers and unsanitized taint flows, suggest that this positive history may not reflect the current state of the plugin. The plugin's strengths lie in its proper use of prepared statements for SQL and robust output escaping, but these are overshadowed by the critical weaknesses in access control for its primary entry points.