Responsive Plus – Elementor Templates & Starter Sites, Advanced Features and Customizer Settings for Responsive Theme. Security & Risk Analysis

The 'responsive-add-ons' plugin v3.4.5 exhibits a mixed security posture. While a significant portion of its SQL queries and output operations are properly handled with prepared statements and escaping, indicating adherence to some best practices, several concerning areas exist. The presence of 4 AJAX handlers and 2 REST API routes without proper authentication or permission checks represent direct entry points for potential unauthorized actions. Furthermore, the use of the `unserialize` function, especially without clear sanitization, poses a risk for object injection vulnerabilities. The plugin's historical vulnerability record is substantial, with 8 known CVEs, including one critical and seven medium severity issues. The common types of past vulnerabilities like CSRF, Missing Authorization, and XSS suggest recurring weaknesses in how user input and actions are handled. The most recent vulnerability dating to June 2025 is concerning, even though it's listed as currently unpatched, it may be a typo and should be treated as a potential issue for a current version.

Overall, the plugin has strengths in its general code hygiene for SQL and output, but its security is significantly undermined by the identified unprotected entry points and the pattern of past vulnerabilities. The risk is moderate to high due to the potential for exploitation through unprotected AJAX and REST API endpoints, coupled with the legacy of critical and medium severity vulnerabilities. While there are no currently active critical vulnerabilities identified and the taint analysis shows no critical or high severity flows, the existing weaknesses demand attention and mitigation.