Ship Per Product Security & Risk Analysis

The 'ship-per-product' plugin v2.1.0 exhibits significant security concerns, primarily due to a large attack surface with a high proportion of unprotected AJAX handlers and a notable lack of proper output escaping. While the plugin doesn't appear to use dangerous functions or make external HTTP requests, the 7 unprotected AJAX endpoints represent a substantial risk, potentially allowing unauthenticated users to trigger arbitrary actions. The low percentage of prepared SQL statements (5%) also raises flags for potential SQL injection vulnerabilities, despite the absence of identified critical or high severity taint flows. The vulnerability history, showing one medium severity CVE that is currently unpatched, further reinforces the need for caution. This unpatched vulnerability, coupled with the weak authorization checks on AJAX handlers, indicates a pattern of neglect in fundamental security practices. Overall, while the absence of dangerous functions and external requests are positive, the combination of a broad unprotected attack surface, insecure coding practices regarding SQL and output escaping, and an unpatched historical vulnerability paints a concerning security picture for this plugin.