MAS Elementor Security & Risk Analysis

The "mas-addons-for-elementor" plugin v1.2.2 exhibits a mixed security posture. On the positive side, the code demonstrates good practices with 100% of SQL queries using prepared statements and a high percentage (85%) of output being properly escaped. The absence of critical or high severity taint flows is also a positive indicator. However, several areas raise concerns. A significant attack surface exists with 3 out of 7 total entry points lacking authentication checks. This could allow unauthorized users to trigger plugin functionality. The plugin has a history of medium severity vulnerabilities, specifically Cross-Site Scripting (XSS) issues, with the most recent one documented in early 2025, suggesting a pattern of past weaknesses in input sanitization or output escaping. Despite having some nonce and capability checks, the presence of unprotected AJAX handlers is a notable weakness.

In conclusion, while the plugin shows strengths in database query handling and general output escaping, the unprotected AJAX endpoints present a tangible risk. The past prevalence of XSS vulnerabilities, even if currently patched, indicates a need for continued vigilance. The overall risk is moderate due to the combination of a potentially exploitable attack surface and a history of input validation issues.