Auto scroll for reading Security & Risk Analysis

The 'auto-scroll-for-reading' plugin version 1.1.4 presents a moderate security risk. While it demonstrates good practices by avoiding file operations and external HTTP requests, and a high percentage of its SQL queries are prepared, significant concerns arise from its unprotected entry points. With 4 out of 5 total entry points lacking authentication checks, particularly AJAX handlers, this plugin is highly susceptible to unauthorized access and execution of potentially malicious actions. The presence of one unsanitized path in the taint analysis, although not rated as critical or high, is still a potential vector for vulnerabilities, especially when combined with the lack of robust input validation. The vulnerability history, featuring a medium-severity Cross-Site Scripting (XSS) vulnerability from April 2025 that remains unpatched, strongly indicates a pattern of security weaknesses and a lack of timely remediation. This unpatched vulnerability, coupled with the substantial attack surface exposed without proper authorization, necessitates immediate attention to mitigate risks.