ScuolaSemplice Contacts Security & Risk Analysis

The scuolasemplice-contacts plugin v1.7 exhibits a concerning security posture due to a significant number of unprotected AJAX handlers. With 8 out of 8 AJAX handlers lacking authentication checks, this presents a substantial attack surface, making it highly vulnerable to unauthorized actions. The taint analysis further highlights this risk, with all 12 analyzed flows having unsanitized paths, including 10 of high severity. This indicates a high likelihood of code injection or data manipulation vulnerabilities being exploitable through these flows.

While the plugin shows some good practices like a relatively high percentage of prepared statements for SQL queries and a decent amount of output escaping, these strengths are heavily overshadowed by the critical lack of authorization on AJAX endpoints and the pervasive taint issues. The absence of any recorded CVEs is a positive sign, suggesting the plugin might not have been widely targeted or previously vulnerable. However, the current static analysis reveals significant weaknesses that could easily lead to exploitable vulnerabilities. The plugin's overall security is thus compromised by these critical oversights, demanding immediate attention.