Horeka Core Security & Risk Analysis

The "horeka-core" plugin v2.4.2 presents a mixed security posture with several significant concerns despite a lack of recorded historical vulnerabilities. The plugin exposes a considerable attack surface, with 6 out of 7 total entry points lacking authentication checks, including all AJAX handlers. This is a major red flag, as unauthenticated AJAX requests are prime targets for exploitation. Furthermore, the taint analysis reveals 2 high-severity flows with unsanitized paths, indicating potential vulnerabilities that could lead to code execution or sensitive data leakage if exploited. The code also shows a concerning lack of output escaping, with nearly half of all outputs not properly escaped, which could lead to cross-site scripting (XSS) vulnerabilities. The absence of nonce checks on AJAX handlers further exacerbates these risks. While the plugin has no recorded CVEs, this does not guarantee security, especially given the identified code-level weaknesses.