LTL Freight Quotes – For Customers of FedEx Freight Security & Risk Analysis

This plugin exhibits a mixed security posture. While it demonstrates good practices in areas like using prepared statements for a significant portion of its SQL queries and implementing numerous nonce and capability checks, several concerning areas require attention. The static analysis reveals a substantial attack surface, with 6 out of 34 entry points lacking proper authentication or permission checks. This is further exacerbated by the taint analysis, which identified one high-severity flow with unsanitized paths, indicating a potential for exploitation. The vulnerability history, though currently showing no unpatched vulnerabilities, does list a past high-severity SQL injection vulnerability, suggesting a recurring pattern of potential weakness in handling user-supplied data that could lead to SQL injection. The plugin's strengths lie in its general code quality regarding SQL and output escaping, but the unprotected entry points and the detected high-severity taint flow present immediate risks that should be addressed.