WP Delicious – Recipe Plugin for Food Bloggers (formerly Delicious Recipes) Security & Risk Analysis

The "delicious-recipes" v1.9.7 plugin exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices in handling SQL queries, with 100% of them utilizing prepared statements, and a high percentage (95%) of outputs are properly escaped. The absence of any critical or high-severity taint analysis findings is also reassuring. However, significant concerns arise from its attack surface. A substantial number of AJAX handlers (16 out of 23) and a REST API route (1 out of 1) lack proper authentication or permission checks, creating numerous potential entry points for unauthorized actions. The presence of the `unserialize` function also warrants caution as it can be a vector for deserialization vulnerabilities if user-supplied data is passed to it without strict sanitization.