Wuunder Dynamic Checkout Security & Risk Analysis

The "wuunder-dynamic-checkout" plugin version 3.2.1 exhibits significant security concerns, primarily due to its unprotected entry points. The static analysis reveals a total of 3 entry points (2 AJAX handlers and 1 REST API route), all of which lack authentication or permission checks. This creates a substantial attack surface, potentially allowing unauthorized users to trigger sensitive functionality. Furthermore, the plugin's output escaping is suboptimal, with only 36% of outputs being properly escaped, raising the risk of cross-site scripting (XSS) vulnerabilities. While there are no known CVEs for this plugin and it does not appear to use dangerous functions or perform raw SQL queries without prepared statements, the lack of basic security measures on its exposed entry points is a critical weakness. The absence of nonce checks and capability checks on AJAX and REST API routes respectively, combined with multiple unsanitized taint flows, points to a high risk of exploitation. The vulnerability history being clean is a positive sign, but it does not mitigate the immediate risks identified in the current codebase.