Loyalty Points Rewards and Referral for WooCommerce – WPLoyalty Security & Risk Analysis

The wployalty plugin v1.4.4 exhibits a mixed security posture. On the positive side, there are no recorded vulnerabilities (CVEs) and the code demonstrates good practices with a high percentage of properly escaped output and prepared SQL statements. The absence of taint analysis findings and dangerous functions also suggests a generally well-developed codebase. However, a significant concern arises from the substantial attack surface presented by 57 AJAX handlers that lack authentication checks. This means that any user, including unauthenticated visitors, could potentially interact with these handlers, opening the door to various types of attacks if these handlers are not inherently secure or properly validated internally. The plugin also only implements 3 capability checks and 1 nonce check across its entire entry points, which is very low given the large number of unprotected AJAX handlers.