Scanpay for WooCommerce Security & Risk Analysis

The "scanpay-for-woocommerce" plugin version 2.1.3 exhibits several concerning security weaknesses. The static analysis reveals a significant attack surface with 2 AJAX handlers, both of which lack authentication checks. This is a critical oversight, as it exposes these endpoints to unauthenticated access and potential exploitation. Furthermore, the plugin performs 45 SQL queries with zero percentage utilizing prepared statements, indicating a high risk of SQL injection vulnerabilities. Only 33% of output is properly escaped, increasing the likelihood of cross-site scripting (XSS) attacks. While the plugin has no recorded vulnerability history, this does not negate the clear risks identified in the static analysis. The lack of authentication on critical entry points and the prevalent use of raw SQL queries are fundamental security flaws that require immediate attention. The presence of a nonce check and a capability check, while positive signs, are insufficient to mitigate the risks posed by the unprotected AJAX handlers and unescaped SQL queries.