LearnPress – Backup & Migration Tool Security & Risk Analysis

The "learnpress-import-export" plugin version 4.1.3 presents a mixed security posture. While the static analysis indicates a clean attack surface with no exposed AJAX handlers, REST API routes, shortcodes, or cron events without authentication, and a good percentage of SQL queries using prepared statements, there are significant concerns regarding output escaping and historical vulnerabilities. The static analysis reveals that only 53% of output is properly escaped, leaving room for potential Cross-Site Scripting (XSS) vulnerabilities. Furthermore, the taint analysis identified four flows with unsanitized paths, though none reached critical or high severity in this specific analysis, this still indicates potential for file inclusion or path traversal issues if not handled correctly.

The plugin's vulnerability history is a major red flag. With a total of 7 known CVEs, including 1 critical and 1 high severity vulnerability, and one critical vulnerability remaining unpatched, the plugin has a track record of serious security flaws. The types of past vulnerabilities (Missing Authorization, PHP Remote File Inclusion, XSS, SQL Injection) are common and impactful, suggesting recurring issues in input validation and access control. The recentness of the last vulnerability (2026-02-11) indicates ongoing security problems.

In conclusion, despite a seemingly secure entry point surface in this version, the high number of past vulnerabilities, the presence of unpatched critical issues, and the concerning output escaping and taint analysis results suggest a plugin that requires careful scrutiny. Users should be aware of the historical risk and the potential for unpatched vulnerabilities to be exploited. The plugin's development may not be keeping pace with security best practices, making it a potential target.