Contact Form Query Security & Risk Analysis

The "contact-form-query" plugin v1.9.0 exhibits a mixed security posture. On the positive side, it demonstrates strong practices regarding output escaping (99% proper) and judicious use of prepared statements for SQL queries (65%). The absence of known CVEs and a clean vulnerability history suggest a generally well-maintained codebase over time. However, a significant concern arises from the attack surface analysis, which reveals 11 AJAX handlers completely unprotected by authentication checks. This presents a substantial risk, as any unauthenticated user could potentially trigger these handlers. Furthermore, the taint analysis identified one flow with an unsanitized path of high severity, indicating a potential vulnerability where user-supplied data might be processed in an insecure manner. While the presence of nonce checks (12) and capability checks (13) is encouraging, their effectiveness is undermined by the lack of authorization on a majority of AJAX endpoints.