Easy Download Media Counter Security & Risk Analysis

The 'easy-download-media-counter' v1.2 plugin presents a mixed security posture. While the static analysis shows a small attack surface with no identified unprotected entry points, several concerning code signals and a history of vulnerabilities warrant caution. Specifically, the lack of output escaping on all identified outputs is a significant concern, potentially exposing users to cross-site scripting (XSS) attacks. The presence of a flow with unsanitized paths, even if not classified as critical or high severity in the taint analysis, indicates a potential avenue for malicious input manipulation. The vulnerability history, which includes a medium severity XSS vulnerability discovered in the near future (2025-09-05), and remains unpatched, strongly suggests recurring security weaknesses in the plugin. This pattern of past vulnerabilities coupled with current code analysis concerning output handling and potential path manipulation points to a plugin that has had and may continue to have exploitable flaws.