WowRevenue – Product Bundles & Bulk Discounts Security & Risk Analysis

The "revenue" plugin v2.1.8 exhibits a mixed security posture. On the positive side, it demonstrates good coding practices with a high percentage of SQL queries using prepared statements and properly escaped output. The presence of numerous nonce and capability checks further indicates an awareness of security principles. However, significant concerns arise from the substantial attack surface exposed without adequate authorization checks.

Specifically, the plugin has 8 unprotected entry points, including 7 AJAX handlers and 1 REST API route that lacks permission callbacks. This represents a considerable risk, as attackers could potentially exploit these unauthenticated endpoints. The taint analysis, while limited in scope, did identify one flow with unsanitized paths, which, although not rated critical or high, warrants attention and further investigation to ensure it doesn't lead to vulnerabilities. The historical vulnerability data shows a past pattern of missing authorization, reinforcing the concerns raised by the static analysis.

While the plugin has no currently unpatched CVEs and a recent vulnerability was addressed, the recurring theme of missing authorization in past issues and the current static analysis findings suggest a persistent weakness. The plugin's strengths lie in its careful handling of database queries and output, but the unprotected entry points remain a significant liability that could be exploited.