amCharts: Charts and Maps Security & Risk Analysis

The "amcharts-charts-and-maps" plugin version 1.4.5 presents a mixed security posture. While it demonstrates good practices such as using prepared statements for all SQL queries and a reasonable number of capability checks, there are notable areas of concern. The presence of two AJAX handlers without authentication checks creates a significant attack surface, potentially allowing unauthorized actions. Furthermore, the taint analysis identified a flow with an unsanitized path, which, while not rated as critical or high, warrants attention as it indicates a potential for input manipulation. The plugin's vulnerability history, with two medium severity Cross-Site Scripting (XSS) vulnerabilities, the most recent being in September 2024, suggests a pattern of input sanitization issues that have been addressed but indicate an ongoing risk if not meticulously maintained. The proper escaping of outputs is also only at 61%, which is a weakness that could contribute to XSS vulnerabilities.