Mobile App Canvas – Convert your Website Into an App for iOS and Android Security & Risk Analysis

The "mobile-app" plugin v3.8.7 exhibits a mixed security posture. While it demonstrates some good practices like using prepared statements for most SQL queries and incorporating nonce checks, significant concerns arise from its attack surface and handling of dangerous functions. A notable number of AJAX handlers (5 out of 8) lack authentication checks, presenting a considerable risk of unauthorized actions being performed. The presence of the `unserialize` function without clear sanitization context also raises a red flag, as it can lead to remote code execution vulnerabilities if fed with untrusted data.

The vulnerability history shows a past medium-severity CVE, and while there are no currently unpatched vulnerabilities, the commonality of "Missing Authorization" in past issues is a concerning pattern that aligns with the static analysis findings. The taint analysis reveals flows with unsanitized paths, though thankfully no critical or high severity issues were identified here, suggesting that while paths might be insecure, they don't immediately lead to exploitable severe consequences in this version.

Overall, the plugin has strengths in its database query practices and some security checks, but the substantial number of unprotected AJAX endpoints and the potential risks associated with `unserialize` require immediate attention. The historical trend of authorization issues further emphasizes the need for robust access control across all entry points.