Newsletter Sign-Up for CleverReach Security & Risk Analysis

The CleverReach plugin v2.3.5 exhibits a mixed security posture. On the positive side, it demonstrates good practices regarding SQL queries, exclusively using prepared statements, and a high percentage of properly escaped output. The absence of known CVEs and a clean vulnerability history are also strong indicators of a relatively secure plugin. However, significant concerns arise from the static analysis of its attack surface. With a total of 4 entry points, a concerning 3 are unprotected, specifically AJAX handlers lacking authentication checks. This absence of capability and nonce checks on these critical entry points presents a substantial risk of unauthorized actions being performed if these AJAX handlers are exploitable.