WRN Pricing Rules for WooCommerce Security & Risk Analysis

The 'wr-price-list-for-woocommerce' plugin v1.0.8 exhibits significant security concerns. The most alarming finding is the complete absence of authorization checks on all 16 identified AJAX handlers. This creates a wide attack surface where any unauthenticated user could potentially trigger malicious actions. Furthermore, taint analysis reveals two high-severity flows with unsanitized paths, indicating potential vulnerabilities like SQL injection or path traversal if not handled properly by subsequent, unverified code. The plugin's vulnerability history is also concerning, with two known CVEs, both currently unpatched, including one high-severity vulnerability. This pattern of missing authorization and unpatched vulnerabilities suggests a recurring disregard for robust security practices.

While the plugin does utilize prepared statements for a majority of its SQL queries and properly escapes a good portion of its output, these strengths are heavily overshadowed by the critical deficiencies in authorization and the presence of unpatched vulnerabilities. The lack of nonce checks on AJAX handlers exacerbates the risk posed by the missing authorization. The repeated occurrence of missing authorization and file upload vulnerabilities in its history points to systemic weaknesses that require immediate attention. In conclusion, this plugin presents a substantial security risk due to its exposed AJAX endpoints and a history of unpatched, high-severity vulnerabilities.