Travelpayouts Security & Risk Analysis

The TravelPayouts plugin version 1.2.2 exhibits a concerning security posture, primarily due to significant risks identified in its attack surface and a history of multiple, serious vulnerabilities. The presence of two unprotected AJAX handlers represents a direct avenue for attackers to potentially exploit the plugin without proper authorization, which is a critical oversight. While the plugin utilizes prepared statements for a majority of its SQL queries and has a decent percentage of properly escaped output, the existence of the `unserialize` dangerous function, especially if used with user-controlled input, poses a severe risk of remote code execution. Taint analysis, though limited in scope, did not reveal critical or high severity unsanitized flows, which is a small positive, but this could be a result of limited analysis coverage rather than true security.