WP Users Pro Subscriptions Plugin – Posts, Pages and Partial Content Protection. Security & Risk Analysis

The wp-users-pro plugin v1.1.2 presents a mixed security posture. While it demonstrates good practices such as a high percentage of prepared SQL statements and the presence of nonce and capability checks, significant concerns arise from the taint analysis. A substantial number of taint flows have unsanitized paths, with a concerning 16 identified as high severity. This suggests a potential for attackers to inject malicious data that is not properly handled, potentially leading to various security issues like cross-site scripting (XSS) or other code execution vulnerabilities.

Despite the absence of known CVEs and a lack of historical vulnerabilities, the high number of high-severity unsanitized taint flows in the static analysis is a critical red flag. This indicates a weakness in how user-supplied data is processed within the plugin's codebase. The plugin's attack surface is limited to shortcodes, and no unprotected entry points were found, which are positive signs. However, the extensive presence of unsanitized paths in taint flows overshadows these strengths, suggesting that the plugin is vulnerable to attacks that leverage improperly handled input, even without a direct history of public exploits.