WP Templata – WordPress Template Library for Elementor Security & Risk Analysis

The "wptemplata" plugin v1.0.8 exhibits a mixed security posture. On the positive side, it demonstrates good practices by ensuring all identified entry points, including AJAX handlers, are protected by authentication checks. All SQL queries are executed using prepared statements, and there are no file operations or bundled libraries, which reduces potential attack vectors. Nonce and capability checks are present, though not on every entry point.

However, several areas raise concerns. The presence of the dangerous `create_function` function is a significant red flag, as it can be exploited for code injection. Furthermore, a notable 41% of output escaping is not properly handled, indicating a risk of Cross-Site Scripting (XSS) vulnerabilities. The taint analysis reveals two flows with unsanitized paths, and while they are not classified as critical or high severity in this static analysis, they warrant investigation due to the potential for them to become exploitable, especially in conjunction with the unescaped output.

The plugin's vulnerability history shows one known medium-severity CVE related to Cross-Site Scripting, which was last reported in 2025. While this vulnerability is currently patched (indicated by 'Currently unpatched: 0'), the pattern suggests a history of input sanitization issues. The combination of unescaped output, unsanitized taint flows, and a past XSS vulnerability points to a recurring weakness in how user-supplied data is handled. While the plugin has strengths in authentication and SQL handling, the aforementioned issues create a notable risk profile.