Connector Wizard (formerly LC Wizard) Security & Risk Analysis

The ghl-wizard plugin v2.2.1 presents a moderate security risk. While it demonstrates some good security practices, such as a high percentage of SQL queries using prepared statements and a substantial number of capability checks, several significant concerns exist. The presence of two AJAX handlers without authentication checks provides a direct avenue for potential unauthorized actions. Additionally, the plugin has a history of three disclosed CVEs, with one high-severity and two medium-severity vulnerabilities still outstanding, indicating a recurring pattern of security weaknesses. The last reported vulnerability in 2026 suggests potential ongoing security issues that may not have been addressed.

Further analysis reveals potential for vulnerabilities. The use of the `unserialize` function, a known dangerous function, is flagged, although no critical or high-severity taint flows were detected in the analyzed sample. The existence of unsanitized paths in taint flows, coupled with a history of Cross-site Scripting (XSS) and Missing Authorization vulnerabilities, suggests that user-supplied input might not always be handled securely. The attack surface is moderately large with 20 entry points, two of which are unprotected, increasing the overall exposure.

In conclusion, while the plugin incorporates some security measures, the combination of unprotected entry points, a history of significant vulnerabilities, and the presence of dangerous functions warrants caution. The ongoing unpatched vulnerability and the pattern of past issues suggest a need for thorough code review and prompt patching to mitigate risks.