Sendcloud Shipping Security & Risk Analysis

The sendcloud-connected-shipping v1.0.24 plugin exhibits a concerning security posture primarily due to its unprotected AJAX endpoints and the presence of a dangerous function. While the plugin demonstrates good practices in its use of prepared statements for SQL queries and a decent rate of output escaping, the unprotected attack surface is a significant risk. All six identified AJAX handlers lack authentication checks, meaning any user, regardless of their role or permissions, could potentially trigger these functions. Furthermore, the use of the `unserialize` function, especially in conjunction with potentially user-controlled input that could reach these AJAX endpoints, opens the door to remote code execution or denial-of-service vulnerabilities if not handled with extreme caution and validation. The taint analysis revealing two flows with unsanitized paths, even without critical or high severity designations, suggests potential weaknesses in how data is handled, which could be exacerbated by the unprotected entry points. The plugin's history of zero known CVEs is positive, indicating a potentially well-maintained codebase in the past, but this does not mitigate the immediate risks identified in the current static analysis. The overall security is weakened by the exposed AJAX handlers and the dangerous function, outweighing the positive aspects of its SQL and output escaping practices.