Pricing Table builder – Price List Security & Risk Analysis

The wpdevart-pricing-table plugin version 1.5.3 exhibits a concerning security posture due to several critical weaknesses identified in the static analysis and taint analysis. While the plugin avoids dangerous functions and file operations, its handling of AJAX requests and output escaping is problematic. Specifically, one AJAX handler lacks authentication checks, creating a direct entry point for unauthenticated users. Furthermore, a significant portion of output (78%) is not properly escaped, increasing the risk of cross-site scripting (XSS) vulnerabilities. The taint analysis revealing four high-severity flows with unsanitized paths further amplifies these concerns, suggesting potential for data manipulation or injection attacks. The plugin's vulnerability history, including one unpatched medium-severity CVE related to CSRF, indicates a pattern of security issues that require attention. Although the plugin does not bundle libraries, the identified vulnerabilities and poor sanitization practices present a notable risk.