SmartText Rotator – Add Motion to Your Words Security & Risk Analysis

The "css3-rotating-words" v5.7 plugin exhibits a strong security posture based on the static analysis, demonstrating good practices in key areas. Notably, all SQL queries are prepared, 100% of output is properly escaped, and there are no observed dangerous functions or file operations. The plugin also includes nonce and capability checks for its entry points. However, the vulnerability history presents a significant concern. The plugin has two known medium-severity CVEs, both of which are reported as patched, but their existence and type (CSRF, Missing Authorization) suggest past weaknesses that require careful monitoring. While the current code analysis shows no direct exploitable vulnerabilities, the historical pattern of authorization and CSRF issues, even if patched, indicates a need for continued vigilance. The low number of entry points and their protection is a positive sign, but the historical context cannot be ignored.