Debug Log Manager – Conveniently Monitor and Inspect Errors Security & Risk Analysis

The debug-log-manager plugin presents a mixed security posture. While it demonstrates good practices in SQL query handling, file operations, and a significant portion of output escaping, several significant concerns emerge. The most critical issue is the large attack surface composed of 10 AJAX handlers, all of which lack authorization checks. This makes it highly susceptible to unauthorized actions by unauthenticated users. Furthermore, the plugin's history of 7 known CVEs, including high-severity vulnerabilities like missing authorization, cross-site scripting, and information exposure, indicates a recurring pattern of security weaknesses. The recent vulnerability in 2025, even if currently patched, suggests that the plugin's development may not consistently prioritize security in its updates. While the absence of critical taint flows and raw SQL queries are positive, the extensive unprotected entry points and historical vulnerability record necessitate caution.