Request a Quote – Quote Forms for Any WordPress Site Security & Risk Analysis

The "request-a-quote" plugin v2.5.5 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices with 100% of its SQL queries using prepared statements and a high percentage (84%) of properly escaped output, suggesting an effort to prevent common vulnerabilities like SQL Injection and XSS. Furthermore, the absence of unpatched CVEs and the presence of a significant number of nonce and capability checks indicate robust security considerations in many areas.

However, several concerning findings warrant attention. The plugin has a substantial attack surface with 33 entry points, and a significant portion (11) of these AJAX handlers lack authentication checks, creating potential avenues for unauthorized actions. The taint analysis revealed two high-severity flows with unsanitized paths, suggesting potential vulnerabilities if these flows are exploitable. While there are no currently unpatched CVEs, the plugin's history of 7 known vulnerabilities, including high and medium severity issues like Missing Authorization, CSRF, and XSS, points to a pattern of past security weaknesses. The use of an outdated bundled library (Select2 v3.2) also introduces potential risks.

Overall, while the plugin has made progress in certain security areas, the combination of a large unprotected attack surface, high-severity taint flows, and a history of various vulnerabilities means that careful consideration and potential remediation are necessary to ensure its security.