Premium Addons for KingComposer Security & Risk Analysis

The plugin 'premium-addons-for-kingcomposer' v1.1.1 exhibits a mixed security posture. While it demonstrates good practices in output escaping and avoids dangerous functions, file operations, and external HTTP requests, significant concerns arise from its attack surface and vulnerability history. A substantial number of AJAX handlers (26) lack authentication checks, presenting a considerable risk for unauthorized actions. The taint analysis also reveals a high number of flows with unsanitized paths, indicating potential weaknesses that could be exploited to manipulate data or application behavior, even without critical or high severity findings in this specific analysis.

The vulnerability history is a major red flag, with one known and currently unpatched high-severity CVE related to 'Improper Control of Filename for Include/Require Statement'. This pattern suggests a recurring weakness in how the plugin handles file inclusion, which is a critical vulnerability type. The presence of an unpatched high-severity CVE is a strong indicator of immediate risk that needs to be addressed. The plugin has a relatively small number of nonce checks for its attack surface, which further exacerbates the risk of the unprotected AJAX handlers.

In conclusion, while the plugin has some positive security attributes, the large number of unprotected AJAX endpoints, the concerning taint analysis results, and especially the unpatched high-severity RFI vulnerability create a significant risk profile. This plugin should be treated with caution, and users should be strongly advised to update to a patched version if available or to disable it until the identified vulnerabilities are resolved.