Kali Forms — Contact Form & Drag-and-Drop Builder Security & Risk Analysis

The kali-forms plugin v2.4.9 presents a mixed security posture. While it demonstrates strong practices in using prepared statements for SQL queries and a high percentage of properly escaped output, significant concerns arise from its attack surface. A large number of AJAX handlers (28 out of 41) lack proper authentication checks, creating a substantial entry point for unauthorized actions. Additionally, the taint analysis reveals two flows with unsanitized paths, which, although not flagged as critical or high severity in this analysis, warrant careful investigation as they could be exploited if combined with specific attack vectors.

The plugin's vulnerability history, with 10 known CVEs primarily revolving around Cross-site Scripting and authorization issues, paints a concerning picture of past security weaknesses. The fact that there are currently no unpatched vulnerabilities is a positive sign, but the prevalence of high and medium severity past issues suggests a recurring pattern of authorization and input validation flaws. While the presence of nonce checks and capability checks are good, their effectiveness is diminished by the sheer number of unprotected AJAX endpoints.

In conclusion, kali-forms v2.4.9 has commendable aspects like secure SQL handling and output escaping. However, the significant number of unprotected AJAX handlers and the historical pattern of authorization and XSS vulnerabilities are major red flags. The taint analysis results, though currently low severity, should be viewed with caution given the plugin's history. This plugin requires careful monitoring and potentially further review of its unprotected entry points.