Global Body Mass Index Calculator Security & Risk Analysis

The plugin 'global-body-mass-index-calculator' v1.2 exhibits a generally good security posture regarding its attack surface and vulnerability history. There are no known CVEs, and the code analysis indicates a commitment to secure coding practices with 100% of SQL queries using prepared statements and no identified taint flows. The limited attack surface, primarily consisting of a single shortcode with no apparent authorization checks, is a positive sign. However, the plugin's output escaping is a significant area of concern, with only 27% of outputs being properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities if user-supplied data is directly reflected in the output without sufficient sanitization. The absence of nonce checks and capability checks also presents a potential risk for certain types of attacks that might exploit the shortcode's functionality without proper user authorization or validation.