Team Members – A WordPress Team Plugin with Gallery, Grid, Carousel, Slider, Table, List, and More Security & Risk Analysis

The gs-team-members plugin v2.7.11 exhibits a mixed security posture. While it demonstrates good practices in output escaping and the use of prepared statements for SQL queries, significant concerns arise from its attack surface and taint analysis. The presence of 5 AJAX handlers without authentication checks is a notable weakness, creating potential entry points for unauthorized actions. Furthermore, the taint analysis reveals 3 high-severity flows with unsanitized paths, indicating potential vulnerabilities that could be exploited for data manipulation or injection attacks.

The plugin's vulnerability history shows one known medium-severity CVE related to Cross-site Scripting (XSS), which was resolved in November 2023. The fact that there are currently no unpatched vulnerabilities is positive, but the past XSS issue coupled with the identified high-severity taint flows warrants caution. The plugin benefits from a good proportion of nonce and capability checks, as well as a reasonable approach to file operations and external requests. However, the combination of unprotected AJAX endpoints and high-severity unsanitized taint flows presents a tangible risk that should be addressed.

In conclusion, gs-team-members v2.7.11 has several strengths, particularly in its SQL handling and output sanitization. Nevertheless, the identified unprotected AJAX handlers and high-severity taint flows are critical security concerns that significantly elevate the risk profile. While past vulnerabilities have been addressed, the current code suggests potential for new exploits. Users should be aware of these risks and consider awaiting a patch or seeking a more thoroughly secured alternative.