Add to Feedly Security & Risk Analysis

The 'add-to-feedly' plugin v1.2.11 presents a mixed security picture. While the static analysis shows a minimal attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events, and all SQL queries are prepared, there are significant concerns regarding output escaping and a history of known vulnerabilities. Specifically, 100% of the observed outputs are not properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities. This is compounded by two known medium-severity CVEs, both of which are currently unpatched and include CSRF and XSS as common types. The presence of these unpatched vulnerabilities, despite the limited apparent attack surface in the current version's code, suggests a pattern of security weaknesses that have not been fully addressed. The bundled jQuery v1.10.2 is also outdated, which can introduce its own set of security risks. While the absence of direct entry points and raw SQL is positive, the unescaped output and unpatched CVEs make this plugin a moderate to high risk.