Glossary Security & Risk Analysis

The 'glossary-by-codeat' plugin v2.3.11 presents a mixed security picture. On the positive side, the static analysis reveals a very small attack surface with no detected AJAX handlers, REST API routes, shortcodes, or cron events that are exposed without authentication or permission checks. This suggests a deliberate effort to limit potential entry points. The plugin also shows some good coding practices, such as the use of capability checks and a decent percentage of SQL queries employing prepared statements. However, significant concerns arise from the output escaping, where only 21% of outputs are properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities. Furthermore, the plugin has a history of two medium-severity CVEs, one of which was discovered very recently (July 2024), related to information exposure and XSS. The absence of nonce checks across all entry points is also a notable weakness, especially given the presence of file operations and a bundled library that could potentially be exploited.