Retainful – WooCommerce Abandoned Cart, Newsletters, Email Marketing, Signup Forms and Automation Security & Risk Analysis

The 'retainful-next-order-coupon-for-woocommerce' plugin version 2.6.43 exhibits a concerning security posture primarily due to a significant number of unprotected entry points. While the code demonstrates good practices in areas like SQL query sanitization and output escaping, the sheer volume of AJAX handlers and REST API routes lacking authentication or permission checks presents a broad attack surface. The static analysis indicates 11 AJAX handlers and 9 REST API routes that are exposed without any form of authorization, meaning any user, including unauthenticated ones, could potentially interact with these functions. Although no dangerous functions or critical taint flows were identified, and the plugin has no recorded vulnerability history, the lack of basic security measures on its entry points is a serious oversight. This could lead to unintended actions or information disclosure if an attacker can craft specific requests to these unprotected endpoints. The presence of two unsanitized paths in the taint analysis, while not classified as critical or high severity, warrants further investigation to understand their potential impact in the context of unprotected entry points.