MailerLite – WooCommerce integration Security & Risk Analysis

The "woo-mailerlite" v3.1.11 plugin presents a concerning security posture, primarily due to a significant number of unprotected AJAX handlers. With 13 AJAX handlers and all of them lacking authentication checks, this creates a substantial attack surface that could be exploited by unauthenticated users. While the plugin shows some good practices like a majority of SQL queries using prepared statements and a decent percentage of properly escaped output, the absence of authentication on so many entry points overshadows these strengths. The limited taint analysis (0 flows) is positive but might not cover all potential vectors, especially given the identified attack surface.

The plugin's vulnerability history, with 4 known CVEs including one high severity and three medium, suggests a pattern of past security weaknesses. The types of vulnerabilities found (SQL Injection, Missing Authorization, CSRF) are common and often directly related to issues like insufficient input validation, missing authorization checks, and inadequate nonce protection, which are unfortunately reflected in the static analysis.

In conclusion, while the plugin demonstrates some positive coding practices, the overwhelming number of unprotected AJAX endpoints is a critical flaw. Coupled with a history of significant vulnerabilities, this plugin requires immediate attention and remediation to address the extensive attack surface and past security issues. The presence of `shell_exec` is also a red flag that warrants further investigation.