Tag Widget Security & Risk Analysis

The custom-tag-widget plugin version 1.0.4 exhibits a generally good security posture concerning known vulnerabilities and the presence of dangerous functions. Its vulnerability history is clean, with no recorded CVEs, which is a positive indicator. The static analysis reveals an absence of SQL injection risks due to the exclusive use of prepared statements and no file operations or external HTTP requests, further bolstering its security. However, a significant concern is the low percentage of properly escaped output. With 91 total outputs and only 21% properly escaped, there is a high risk of Cross-Site Scripting (XSS) vulnerabilities. This is further supported by the taint analysis, which identified two flows with unsanitized paths, even though they were not categorized as critical or high severity, they still represent potential execution vectors. The plugin also lacks nonce and capability checks on its entry points, which, while currently having a zero attack surface, could become a significant risk if new AJAX handlers or REST API routes are added without proper security measures.