amr shortcodes Security & Risk Analysis

The 'amr-shortcodes' plugin v1.7 exhibits a mixed security posture. While it demonstrates good practices by utilizing prepared statements for all SQL queries, including nonce and capability checks, and has a seemingly small attack surface with no identified AJAX handlers, REST API routes, shortcodes, or cron events, there are significant concerns. The taint analysis reveals two high-severity flows with unsanitized paths, indicating potential vulnerabilities where user input could be used in an unsafe manner. Furthermore, only 27% of output escaping is properly done, which is a notable weakness and a common precursor to cross-site scripting vulnerabilities. The plugin's vulnerability history is also a cause for concern, with one medium-severity Cross-site Scripting (XSS) vulnerability being recently discovered and currently unpatched. This pattern suggests a recurring issue with input sanitization and output escaping, despite some efforts to implement security checks.