Sky Addons for Elementor Security & Risk Analysis

The plugin "sky-elementor-addons" v3.2.4 exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and having a high percentage of properly escaped output. The presence of numerous capability checks and nonce checks across its AJAX handlers indicates an awareness of WordPress security best practices for handling user-initiated actions. However, a significant concern arises from the static analysis revealing one AJAX handler without authentication checks, directly contributing to an unprotected entry point. This, coupled with two identified flows with unsanitized paths in the taint analysis, suggests potential avenues for attackers to exploit vulnerabilities if not properly handled by the application logic.

The plugin's historical vulnerability data is concerning, with nine previously disclosed CVEs, including two high-severity vulnerabilities (Cross-site Scripting, Missing Authorization, and Exposure of Sensitive Information). While there are currently no unpatched CVEs, the sheer volume and types of past vulnerabilities suggest recurring security weaknesses within the plugin's codebase. This history, despite the current absence of unpatched issues, should be viewed as a red flag, indicating a potential for new vulnerabilities to be introduced in future updates or remain undiscovered. Overall, while some secure coding practices are evident, the unprotected AJAX handler, unsanitized paths, and a history of significant vulnerabilities necessitate caution.