AdPlugg WordPress Ad Plugin Security & Risk Analysis

The plugin "adplugg" v1.12.22 presents a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and a high percentage of proper output escaping. Furthermore, there are no identified dangerous functions, file operations, external HTTP requests, or bundled libraries that could introduce vulnerabilities. The plugin also includes a nonce check, which is a positive security control.

However, the plugin has a notable concern regarding its attack surface. It exposes two AJAX handlers, with one of them lacking authentication checks. This unprotected entry point could be a target for attackers to potentially trigger unintended actions or gather information. The vulnerability history, while showing no currently unpatched CVEs, indicates a past medium-severity Cross-Site Scripting (XSS) vulnerability. The fact that this vulnerability is from 2015 and is no longer marked as unpatched suggests it may have been addressed in subsequent versions, but the past occurrence warrants continued vigilance.

In conclusion, while the plugin exhibits strong internal coding practices regarding database interactions and output sanitization, the unprotected AJAX endpoint represents a significant and immediate risk. The historical XSS vulnerability, though patched, serves as a reminder of the potential for input validation weaknesses. Addressing the unprotected AJAX handler should be the top priority to improve the plugin's security.