Anton Extensions Security & Risk Analysis

The "4nton-extensions" v1.2.2 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices regarding SQL queries, exclusively using prepared statements, and has no recorded vulnerabilities or CVEs, suggesting a potentially mature and well-maintained codebase. However, the static analysis reveals significant security concerns, primarily revolving around its attack surface. A substantial number of AJAX handlers (8 out of 8) lack authentication checks, presenting a wide open door for potential exploitation. Furthermore, the complete absence of nonce checks and capability checks on any entry points, coupled with only 50% of output being properly escaped, amplifies these risks.