Stylish Cost Calculator – Quote Generator, Lead Gen & Price Estimator Security & Risk Analysis

The "stylish-cost-calculator" v8.2.2 plugin exhibits a mixed security posture. While it demonstrates good practices in using prepared statements for SQL queries (78%) and proper output escaping (85%), several concerning areas require attention. The presence of 3 AJAX handlers without authentication checks represents a significant attack surface that could be exploited by unauthenticated users.

The taint analysis reveals 16 high-severity flows with unsanitized paths, indicating potential vulnerabilities related to improper input handling. This, coupled with a history of 4 medium-severity CVEs, with one still unpatched, suggests recurring issues with missing authorization and cross-site scripting.

Overall, the plugin has potential strengths in its use of secure coding practices for database interactions and output rendering. However, the identified unauthenticated entry points, high-severity taint flows, and historical vulnerability patterns indicate that the plugin is not entirely secure and requires further review and remediation to mitigate potential risks.