Saksh WP Hotel Booking Lite Security & Risk Analysis

This plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices in SQL query preparation (95% prepared) and output escaping (87%), and has no known past or present vulnerabilities. The presence of 22 nonce checks and 4 capability checks indicates an attempt to secure certain entry points. However, significant concerns arise from the attack surface. The plugin exposes 9 AJAX handlers, with a concerning 4 of them lacking any authentication checks, presenting a direct vector for potential abuse. Additionally, the taint analysis reveals 15 flows with unsanitized paths, including one of high severity, which could lead to various injection vulnerabilities if exploited. While the absence of known CVEs is positive, the identified code signals and taint flows suggest potential weaknesses that could be exploited in the absence of further sanitization and authentication.