Widgets for Capterra Reviews Security & Risk Analysis

The review-widgets-for-capterra plugin exhibits several concerning security practices despite a clean vulnerability history and good output escaping. A significant portion of its attack surface, specifically all 3 entry points (1 AJAX handler and 2 REST API routes), lack proper authentication and permission checks. This creates a broad opportunity for unauthorized access and potential manipulation of plugin functionality.

The static analysis also flags the use of the `unserialize` function, which is a known security risk if not handled with extreme care, as it can lead to arbitrary object injection vulnerabilities if the serialized data originates from an untrusted source. While no critical or high severity taint flows were identified, and the vast majority of SQL queries are prepared, the presence of unsanitized paths in taint analysis, even at a lower severity, combined with the unprotected entry points, indicates potential pathways for malicious input to be processed insecurely.

The plugin's lack of recorded vulnerabilities is a positive indicator, suggesting that either it has not been a target or its development has generally followed secure practices. However, the current static analysis findings, particularly the unprotected entry points and the use of `unserialize`, present a notable risk that should be addressed. A balanced view suggests the plugin has good output escaping and prepared SQL statements, but the unprotected attack surface and potential for unserialize-related vulnerabilities are significant weaknesses.