Swift Commerce — Wishlists, Subscriptions & Cart Recovery for WooCommerce Security & Risk Analysis

The "swift-commerce" plugin v1.4.8 exhibits a mixed security posture. While it demonstrates strong practices in output escaping (99% properly escaped) and a high rate of prepared statement usage in SQL queries (85%), significant concerns arise from its attack surface. A substantial portion of its entry points, specifically 36 out of 104, lack adequate authentication or permission checks. This includes 4 unprotected AJAX handlers and 32 REST API routes missing permission callbacks, creating a direct pathway for potential unauthorized access or manipulation.

The taint analysis reveals a more alarming situation, with 14 out of 23 analyzed flows flagged as high severity due to unsanitized paths. This indicates a real risk of code injection or path traversal vulnerabilities if these flows are exposed. Coupled with the unprotected entry points, these high-severity taint flows present a critical area of concern. The plugin's history of zero known CVEs is positive, suggesting a generally well-maintained codebase or a lack of past exploitation. However, this cannot entirely offset the immediate risks identified in the static and taint analysis, particularly the numerous unprotected entry points and high-severity unsanitized flows.