Expandable FAQ Security & Risk Analysis

The "expandable-faq" plugin version 6.1.10 presents a generally good security posture based on the provided static analysis. The plugin demonstrates strong adherence to secure coding practices by utilizing prepared statements for a high percentage of its SQL queries and properly escaping a majority of its output. The absence of any recorded vulnerabilities (CVEs) further reinforces this positive outlook, suggesting a history of secure development and maintenance.

However, there are areas that warrant attention. The taint analysis reveals two flows with unsanitized paths, which, while not flagged as critical or high severity in this instance, represent a potential risk. The lack of any nonce checks across the entire plugin is a significant concern, as this is a fundamental security measure in WordPress for preventing Cross-Site Request Forgery (CSRF) attacks, particularly if any future functionality introduces new entry points or modifies existing ones.

While the plugin currently has zero entry points without authentication checks, the absence of nonce checks is a weakness that could be exploited if vulnerabilities in other areas were to arise. The bundled DataTables library version 1.10.18 is also an older version and could potentially harbor its own unpatched vulnerabilities. Overall, the plugin is in a relatively secure state due to its SQL and output sanitization practices and lack of historical vulnerabilities, but the lack of nonce checks and the outdated bundled library are notable weaknesses.