Omnisend for Contact Form 7 Add-On Security & Risk Analysis

The Omnisend for Contact Form 7 plugin, version 1.1.6, exhibits a strong security posture based on the provided static analysis. The absence of any identified AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points significantly limits the plugin's attack surface. Furthermore, the code shows good practices regarding SQL query handling, with 100% using prepared statements, and a high percentage of output escaping (83%) which mitigates the risk of cross-site scripting vulnerabilities. The presence of nonce checks, although not explicitly tied to specific entry points in this summary, is a positive indicator of security consciousness.