ShopCred – WooCommerce Builder with Products Grid & Carousel Block Security & Risk Analysis

The shopcred plugin exhibits a mixed security posture. While it avoids dangerous functions and file operations, significant concerns arise from its handling of entry points and data sanitization. A substantial portion of its AJAX handlers (4 out of 10) and one REST API route lack proper authentication or permission checks, creating a large attack surface for unauthorized access or manipulation. The static analysis reveals that 3 SQL queries are not using prepared statements, and a concerning 42% of outputs are not properly escaped, increasing the risk of cross-site scripting (XSS) vulnerabilities. The presence of two unsanitized taint flows, although not classified as critical or high severity in this analysis, warrants attention as they could potentially be exploited. The vulnerability history, including one unpatched medium severity CVE related to XSS, further reinforces these concerns and suggests a pattern of input sanitization weaknesses. Despite a relatively low number of total entry points, the lack of robust security checks on several of them, coupled with the history of XSS, indicates a need for immediate improvement to mitigate potential risks.