Chained Quiz Security & Risk Analysis

The Chained Quiz plugin v1.3.9 presents a mixed security posture. While it demonstrates good practices like extensive use of prepared statements for SQL queries (97%) and a significant number of nonce and capability checks, several areas raise concerns. The presence of two AJAX handlers without authentication checks significantly expands the attack surface and creates potential entry points for unauthorized actions. The taint analysis reveals six high-severity flows with unsanitized paths, indicating potential for serious vulnerabilities like injection attacks or SSRF if these flows are exploitable.

The plugin's vulnerability history is a major red flag, with a total of 24 known CVEs, including one critical vulnerability. Although there are currently no unpatched vulnerabilities, the sheer volume and variety of past issues (Authorization Bypass, SSRF, CSRF, XSS, SQL Injection) suggest a recurring pattern of security weaknesses. The last vulnerability being reported in late 2025, while seemingly recent, doesn't negate the historical risk profile. The relatively low percentage of properly escaped output (46%) also contributes to a higher risk of Cross-Site Scripting (XSS) vulnerabilities.

In conclusion, Chained Quiz v1.3.9 has strengths in its SQL handling and security checks, but these are overshadowed by critical concerns regarding unprotected AJAX endpoints, high-severity taint flows, and a history of numerous and serious vulnerabilities. Users should exercise extreme caution and ensure they are on the latest version with all patches applied, though historical data suggests ongoing vigilance is necessary.