SALERT – Fake Sales Notification WooCommerce Security & Risk Analysis

The 'salert' plugin v1.3.0 exhibits a mixed security posture. While it demonstrates good practices by utilizing prepared statements for all SQL queries and not performing file operations or external HTTP requests, significant concerns arise from its attack surface and output escaping. Two out of three AJAX handlers lack authentication checks, presenting a direct pathway for unauthorized actions. Furthermore, a concerningly low 41% of output is properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities, especially when combined with the unprotected AJAX endpoints. The plugin's history of two medium-severity vulnerabilities, specifically XSS and Missing Authorization, directly aligns with the current code analysis findings, suggesting a recurring pattern of these weaknesses. Despite the absence of critical taint flows and dangerous functions in this static analysis, the combination of unprotected entry points and poor output sanitization, coupled with historical vulnerability trends, makes this version of the plugin moderately risky.