Cleanup – Directory Listing & Classifieds WordPress Plugin Security & Risk Analysis

The plugin "cleanup-light" v1.0.6 exhibits a mixed security posture. While it demonstrates strong adherence to secure coding practices such as 100% prepared SQL statements and a high percentage of properly escaped output, significant concerns arise from its attack surface. The presence of 16 AJAX handlers without authentication checks represents a substantial entry point for potential attackers. Furthermore, the taint analysis reveals two high-severity flows with unsanitized paths, indicating a risk of sensitive data exposure or code execution if these flows are improperly triggered.

The plugin's vulnerability history shows a single medium-severity CVE related to Cross-site Scripting (XSS). Although this vulnerability is currently patched, its existence, especially concerning XSS, aligns with the taint analysis findings of unsanitized paths, suggesting a pattern of input sanitization weaknesses. The large number of entry points, particularly the unprotected AJAX handlers, coupled with the high-severity taint flows, requires careful consideration. Despite the positive aspects of SQL handling and output escaping, the potential for exploitation through the unprotected AJAX handlers and the identified taint flows warrants attention.