Shop Products Filter Security & Risk Analysis

The "trusty-woo-products-filter" v1.2 plugin exhibits a concerning security posture, despite some positive aspects. While it demonstrates good practice by using prepared statements for all SQL queries and has a reasonable percentage of properly escaped output, significant vulnerabilities are present. The plugin exposes a large attack surface with 4 out of 5 entry points lacking authentication checks. This is compounded by the existence of 3 flows with unsanitized paths, indicating potential for injection vulnerabilities, although no critical or high severity issues were found in the taint analysis for this version. The historical vulnerability data is particularly alarming. A high severity "PHP Remote File Inclusion" vulnerability was recorded in 2025, and importantly, this vulnerability is currently unpatched. This suggests a pattern of introducing exploitable vulnerabilities and a lack of timely remediation, which is a critical security concern for any plugin.