{eac}ObjectCache – a persistent object cache using SQLite & APCu to cache WordPress objects. Security & Risk Analysis

Based on the static analysis, the eacobjectcache plugin version 2.1.2 appears to have a generally good security posture. The absence of any AJAX handlers, REST API routes, shortcodes, or cron events with unprotected entry points is a significant strength, indicating a limited attack surface. The code signals also show a strong reliance on prepared statements for SQL queries, which is a best practice. However, there are areas for concern. The output escaping is only properly implemented in 58% of cases, suggesting a potential risk of cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled carefully. The lack of nonce checks and capability checks across all identified entry points (though there are none) is noted, but the current lack of entry points mitigates this risk for now. The vulnerability history being entirely clear is a positive indicator, suggesting that the plugin has not historically been a source of significant security flaws. Overall, while the plugin benefits from a small attack surface and good SQL practices, the less-than-ideal output escaping warrants attention for any future development or updates.