ACF City Selector Security & Risk Analysis

The 'acf-city-selector' v1.17.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices with 100% of SQL queries using prepared statements and a significant number of nonce and capability checks. All identified AJAX entry points also appear to have authentication checks, contributing to a reduced attack surface from direct exploitation. However, concerns arise from the taint analysis, which revealed three high-severity flows with unsanitized paths. These could potentially lead to vulnerabilities if not handled carefully, even with other security measures in place.

The vulnerability history is a significant concern. With two known CVEs, one of which remains unpatched and rated as high severity, the plugin has a history of exposing sensitive information and allowing unrestricted file uploads. This pattern indicates recurring security weaknesses that attackers may still be able to exploit. While the current code analysis shows improvements in some areas like SQL, the lingering unpatched vulnerability and past issues point to a need for continued vigilance and prompt patching.

In conclusion, while 'acf-city-selector' v1.17.0 has made strides in secure coding practices regarding database interactions and input validation at entry points, the presence of high-severity taint flows and a history of unpatched vulnerabilities significantly detract from its overall security. The unpatched high-severity CVE is the most pressing issue, alongside the potential for exploitation of the identified unsanitized paths.