ACF Booster Security & Risk Analysis

The ACF Booster v1.0 plugin presents a significant security risk due to its unprotected AJAX endpoints. While the plugin demonstrates good practices in other areas, such as using prepared statements for SQL queries and having no recorded vulnerabilities, the absence of authentication checks on two AJAX handlers creates a substantial attack surface. This means any unauthenticated user could potentially trigger these handlers, leading to unintended actions or data manipulation if the logic within these handlers is not robustly secured. The taint analysis also indicates flows with unsanitized paths, though currently assessed as not critical or high severity, this warrants attention in conjunction with the unprotected entry points. The lack of nonce checks and capability checks on these AJAX handlers further exacerbates the risk, leaving them vulnerable to CSRF attacks and privilege escalation if not properly handled. Overall, the plugin has strengths in its SQL handling and lack of historical vulnerabilities, but the unprotected AJAX endpoints are a critical weakness that needs immediate attention.