AI Infographic Maker Security & Risk Analysis

The "infographic-and-list-builder-ilist" plugin, version 5.1.5, exhibits a mixed security posture. While it demonstrates good practices in several areas, such as using prepared statements for all SQL queries and implementing a substantial number of nonce and capability checks, significant concerns remain. The presence of one AJAX handler without authentication checks creates a notable attack vector. Furthermore, the plugin has a history of four known CVEs, including one critical vulnerability, indicating a recurring pattern of security weaknesses despite recent patching. The common vulnerability types suggest potential issues with input validation and authorization, which, combined with the static analysis findings, require careful attention.