Currency Converter for WooCommerce Security & Risk Analysis

The 'wc-multi-currency-switcher' plugin v1.0.0 presents a significant security risk due to its unprotected entry points. The static analysis reveals a substantial attack surface, with 9 AJAX handlers, all of which lack authentication checks. This means any unauthenticated user could potentially trigger these handlers, leading to unintended actions or information disclosure. While no dangerous functions or direct SQL injection vulnerabilities were found through taint analysis, the lack of input sanitization in 3 analyzed flows is a concern, although it did not reach a critical or high severity in this specific scan. The absence of known CVEs is positive, but it does not negate the inherent risks posed by the unprotected AJAX endpoints and the unescaped output which is present in over 60% of cases.