Shipping Cost on Product Page Calculator for WooCommerce Security & Risk Analysis

The octolize-shipping-cost-on-product-page plugin, version 1.5.15, exhibits a generally positive security posture, particularly concerning its limited attack surface and the absence of known vulnerabilities. The plugin has zero recorded CVEs, indicating a history of responsible development or a lack of targeting. The static analysis reveals a minimal attack surface with only one AJAX handler, and importantly, this handler is protected by nonce and capability checks, which is a significant strength. The lack of direct REST API routes, shortcodes, or cron events further reduces potential entry points. However, there are areas for improvement. The presence of the 'proc_open' function, while not inherently a vulnerability, is a high-risk function that should be handled with extreme caution and robust sanitization. Furthermore, the significant percentage of SQL queries (100%) not using prepared statements is a major concern, posing a substantial risk of SQL injection vulnerabilities. The relatively low percentage of properly escaped output (39%) also suggests potential cross-site scripting (XSS) vulnerabilities. While taint analysis shows no critical or high severity flows, this is likely due to the limited number of flows analyzed and the lack of sanitization on the SQL queries. In conclusion, the plugin benefits from a small attack surface and a clean vulnerability history, but the use of raw SQL queries and insufficient output escaping are critical weaknesses that require immediate attention to prevent serious security compromises.