Pago por Redsys Security & Risk Analysis

The 'pago-redsys-tpv-grafreak' plugin v1.0.14 exhibits a mixed security posture. While it demonstrates good practices in database interaction with 100% prepared statements and a high rate of output escaping (92%), there are significant concerns regarding its attack surface. Specifically, the presence of two AJAX handlers without authentication checks presents a direct pathway for potential unauthorized actions. The taint analysis, though limited in scope with only 3 flows, revealed 2 flows with unsanitized paths, which could be exploited if they interact with sensitive functions. The vulnerability history shows one previously disclosed medium-severity vulnerability related to Cross-site Scripting, which has since been patched. However, the pattern of past vulnerabilities, even if resolved, coupled with the current lack of capability checks and the identified unprotected entry points, suggests that ongoing vigilance is necessary. The plugin's strengths lie in its secure handling of database queries and output, but its unprotected AJAX endpoints are a notable weakness.