CACR Отправка заявок с сайта в Мессенджер MAX Security & Risk Analysis

The market-bots-max-cf7-relay v1.2.7 plugin exhibits a generally strong security posture, with several positive indicators such as 100% of SQL queries using prepared statements and 100% of output properly escaped. The absence of dangerous functions, file operations, and recorded vulnerabilities in its history are also commendable. However, there is a significant concern regarding its attack surface. The plugin exposes one REST API route without proper permission callbacks, which could potentially be exploited by unauthenticated users to perform unintended actions. While no taint analysis revealed critical or high-severity issues, the unprotected REST API route represents a concrete risk that needs to be addressed.