WP eCommerce Wishlist Security & Risk Analysis

The "wp-e-commerce-whish-list" v1.1.7 plugin exhibits several concerning security practices despite a clean vulnerability history. The static analysis reveals a significant attack surface consisting of three AJAX handlers, all of which lack authentication checks. This is a major concern, as it potentially exposes these handlers to unauthorized access and malicious exploitation. Furthermore, the presence of dangerous functions like `unserialize` and `create_function`, coupled with only 20% of output being properly escaped, indicates potential vulnerabilities related to code injection and cross-site scripting (XSS). The lack of nonce checks on AJAX handlers exacerbates these risks, allowing attackers to forge requests. While the plugin does not appear to have any known CVEs and uses prepared statements for its SQL queries, the absence of these fundamental security measures in its entry points and output handling are critical weaknesses. The plugin's vulnerability history is notably absent, which could indicate either diligent security development or simply a lack of past discoveries. However, the static analysis findings present a clear and present danger that requires immediate attention.