WPB Product Size Chart Popup for WooCommerce Security & Risk Analysis

The "wpb-product-size-charts-for-woocommerce" plugin v1.07 exhibits a mixed security posture. While it demonstrates strengths such as a lack of reported CVEs and a commitment to using prepared statements for all SQL queries, significant concerns arise from its attack surface. Notably, all five identified AJAX handlers lack authentication checks, representing a critical vulnerability. This means that unauthenticated users could potentially trigger these handlers, leading to unexpected plugin behavior or even further exploitation if the handlers perform sensitive operations. The limited number of capability checks and nonce checks on these handlers exacerbates this risk.

Despite the absence of known vulnerabilities and the lack of identified critical taint flows, the unprotected AJAX endpoints are a primary concern. The high percentage of unescaped output (40%) also presents a risk of Cross-Site Scripting (XSS) vulnerabilities, though the absence of specific taint flows impacting output suggests the impact might be limited or harder to trigger. The plugin's vulnerability history is clean, which is a positive indicator, but this can sometimes be misleading if the code hasn't been thoroughly scrutinized for the types of vulnerabilities present in its attack surface. Overall, the plugin has potential, but the unprotected AJAX handlers and the unescaped output require immediate attention to mitigate substantial security risks.