Campaign Monitor Dual Registration Security & Risk Analysis

This plugin exhibits a concerning security posture primarily due to a lack of robust access control mechanisms. The static analysis reveals two AJAX handlers, both of which are unprotected, presenting a significant attack surface that could be exploited by unauthenticated users. Furthermore, the presence of the `unserialize` function is a red flag, as it can lead to Remote Code Execution (RCE) if used with untrusted user input, although the taint analysis found no such flows in this specific version. The extremely low percentage of properly escaped output (2%) indicates a high likelihood of Cross-Site Scripting (XSS) vulnerabilities, exposing users to malicious script injection.