Eli's PHP Compatibility Scanner Security & Risk Analysis

The "eli-php-compatibility-scanner" plugin version 1.1.1 exhibits a mixed security posture. On the positive side, it demonstrates good practices in output escaping, SQL query preparation, and has no recorded historical vulnerabilities. This suggests a commitment to secure coding principles in these areas.

However, significant concerns arise from the static analysis. The plugin exposes 9 AJAX handlers with no authentication or capability checks, representing a substantial attack surface with direct entry points. Furthermore, taint analysis reveals 3 flows with unsanitized paths, including 2 critical severity issues, indicating potential for sensitive data to be manipulated or exposed. The presence of 3 dangerous function calls (exec) also raises a red flag, especially when combined with the unprotected AJAX endpoints.

While the lack of known CVEs is reassuring, it does not negate the critical risks identified in the current code analysis. The high number of unprotected AJAX handlers and critical taint flows, coupled with the use of dangerous functions, presents a clear and present danger. The plugin requires immediate attention to address these security weaknesses.