Stunning popups to increase conversion or capture subscribers Security & Risk Analysis

The plugin exhibits a mixed security posture. On one hand, it demonstrates good practices by utilizing prepared statements for SQL queries and largely proper output escaping. The absence of known vulnerabilities and CVEs in its history is a positive sign, suggesting a generally well-maintained codebase or a lack of past exploitation.

However, a significant concern arises from the presence of a single AJAX handler that lacks authentication checks. This directly exposes an entry point to potential attackers, making it a prime target for unauthorized actions or data manipulation. The lack of nonce checks further exacerbates this risk, as it means requests to this handler might not be validated for their origin.

While the plugin's vulnerability history is clean, the single unprotected AJAX endpoint represents a clear and immediate risk that needs attention. The overall security is good in many aspects, but this specific oversight significantly lowers its security posture and requires remediation.