SendApp Notification – Notifications on Orders and abandoned carts for WooCommerce. Security & Risk Analysis

The 'sendapp-notification' plugin version 1.4.1 exhibits a concerning security posture primarily due to a significant number of unprotected entry points. All six identified AJAX handlers lack authentication checks, presenting a broad attack surface. While the taint analysis did not reveal critical or high severity vulnerabilities, the presence of two flows with unsanitized paths warrants attention, even if they did not escalate to critical issues in this analysis.

The plugin's code signals indicate some good practices, such as a high percentage of properly escaped outputs and the use of prepared statements in SQL queries. However, the single instance of the `unserialize` function is a notable risk, as it can lead to remote code execution if not handled with extreme care and strict input validation. The limited vulnerability history, with zero recorded CVEs, suggests a past track record of security, but this should not overshadow the immediate risks identified in the static analysis.

In conclusion, the plugin has areas of strength, particularly in output escaping and database query protection. Nevertheless, the lack of authentication on AJAX endpoints and the presence of `unserialize` are significant weaknesses that expose the site to potential attacks. The limited vulnerability history is a positive sign, but the current static analysis findings necessitate a cautious approach.