Portugal DPD Pickup and Lockers network for WooCommerce Security & Risk Analysis

The plugin "portugal-chronopost-pickup-woocommerce" version 3.7 exhibits a mixed security posture. On the positive side, the code demonstrates good practices regarding SQL query preparation and output escaping, with a very low percentage of unsanitized outputs. The lack of known CVEs and common vulnerability types in its history is also a strong indicator of a relatively secure past. However, significant concerns arise from the static analysis.

The plugin has a concerningly high proportion of unprotected entry points, specifically two AJAX handlers that lack any form of authentication or capability checks. This creates a substantial attack surface that could be exploited by unauthenticated users. While the taint analysis did not reveal critical or high-severity issues in the single flow analyzed, the presence of a flow with unsanitized paths warrants attention, especially in conjunction with the unprotected AJAX handlers.

Overall, while the plugin has a clean vulnerability history and good practices in many areas, the exposed AJAX endpoints present a clear and immediate risk. The absence of nonce and capability checks on these critical entry points significantly weakens its security posture, making it a target for various attacks. Addressing these unprotected handlers should be the highest priority to improve its security.