SKT Page Builder Security & Risk Analysis

The skt-builder plugin v5.0 exhibits a mixed security posture. On the positive side, it demonstrates strong practices regarding SQL queries, exclusively using prepared statements, and a high percentage of properly escaped output. The absence of critical or high severity taint flows and the lack of currently unpatched CVEs are also encouraging signs. However, significant concerns arise from the substantial attack surface, particularly the presence of 5 AJAX handlers without authentication checks. This leaves a considerable portion of the plugin's functionality vulnerable to unauthorized access and potential manipulation. The historical vulnerability data, while showing no currently unpatched issues, reveals a past pattern of missing authorization vulnerabilities, which aligns with the static analysis findings. This suggests a recurring weakness in how the plugin handles user permissions.

Despite the strengths in data sanitization and query handling, the unprotected AJAX endpoints represent a tangible and immediate risk. The plugin's history, with a notable number of past vulnerabilities including missing authorization, reinforces the need for caution. While the current version appears to have addressed historical unpatched issues, the static analysis highlights a potential for new vulnerabilities if these authorization gaps are not rigorously addressed. The overall risk is moderate, leaning towards concerning due to the direct exposure of functionality via unprotected AJAX handlers.