Email Inquiry & Cart Options for WooCommerce Security & Risk Analysis

The security posture of the "woocommerce-email-inquiry-cart-options" plugin version 3.4.3 presents a mixed bag of good practices and significant concerns. While the plugin demonstrates a high percentage of properly escaped output (91%) and includes a decent number of nonce and capability checks (7 and 4 respectively), the number of unprotected entry points is a major red flag. With 4 out of 5 identified entry points (all AJAX handlers) lacking authentication checks, this plugin is highly susceptible to unauthorized access and malicious actions if these handlers can be triggered by unauthenticated users. The presence of unsanitized paths in taint analysis, even if not currently critical or high severity, hints at potential vulnerabilities that could be exploited. The plugin's vulnerability history, specifically the unpatched medium severity CVE related to Cross-site Scripting, is a critical concern. The fact that this vulnerability is dated 2026-01-26 and remains unpatched suggests a lack of active maintenance or a delay in addressing security flaws, making it a target for attackers looking for known exploits.

Overall, the plugin has some strengths in its output sanitization and the presence of some security checks. However, the critical lack of authentication on a substantial portion of its attack surface, coupled with an unpatched known vulnerability and potential for unsanitized data flows, significantly elevates the risk. The presence of raw SQL queries without prepared statements also adds to the potential for SQL injection vulnerabilities, though the static analysis did not flag any for this specific version. The reliance on bundled libraries like jQuery could also pose a risk if not kept up-to-date, although no specific issues were highlighted here. The primary concern is the ease with which an attacker could potentially interact with sensitive functionalities due to the unprotected AJAX endpoints.