Find My Blocks – Locate blocks on your site Security & Risk Analysis

The plugin "find-my-blocks" v4.0.3 exhibits a generally good security posture, with a significant emphasis on secure coding practices. The static analysis reveals no dangerous functions, all SQL queries utilize prepared statements, and all output is properly escaped. The absence of file operations and external HTTP requests further mitigates common attack vectors. Furthermore, the single REST API route and the single entry point are protected by capability checks, and there are no unauthenticated AJAX handlers or shortcodes, indicating a well-defined and secured attack surface. The taint analysis also shows no critical or high severity flows with unsanitized paths. However, the plugin's vulnerability history, which includes one known CVE classified as medium in the past, specifically related to Missing Authorization, suggests that while current code appears more robust, past issues indicate a potential area of concern. This suggests that developers are actively addressing vulnerabilities, but the presence of a past authorization issue warrants continued vigilance for any such findings in the future. Overall, the plugin demonstrates strengths in secure coding and attack surface management, but the historical vulnerability should be a reminder to maintain a proactive security approach.