Author Website Templates – Create Writer, Author & Publisher Websites Easily Security & Risk Analysis

The "author-website-templates" plugin v1.1.6 exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for its SQL queries and appears to have a strong history of no known vulnerabilities, suggesting a generally well-maintained codebase. However, the static analysis reveals significant concerns regarding its attack surface.

The plugin exposes 12 entry points, with a substantial 6 of these lacking any authentication checks. This is particularly worrying in conjunction with the taint analysis, which identified 2 flows with unsanitized paths, rated as high severity. These flows, combined with unprotected AJAX handlers, present a clear opportunity for attackers to potentially exploit these pathways.

While the plugin has no recorded vulnerability history, the presence of high-severity taint flows in the current version necessitates caution. The lack of authentication on a significant portion of its entry points is a critical weakness that could be exploited if the unsanitized paths lead to sensitive operations. The plugin's strengths lie in its SQL handling and lack of historical vulnerabilities, but its current attack surface and taint flow issues are significant risk factors.