Like computy Security & Risk Analysis

The 'like-computy' v1.4.6 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices regarding SQL queries, utilizing prepared statements exclusively, and has no recorded vulnerabilities or CVEs. The absence of file operations and external HTTP requests further reduces potential attack vectors. However, significant concerns arise from its attack surface. With a total of 4 entry points, 2 of which are AJAX handlers lacking authentication checks, and 0 nonce checks, there is a clear risk of unauthorized actions being performed. Furthermore, only 52% of output escaping is properly implemented, indicating a potential for cross-site scripting (XSS) vulnerabilities when data is displayed back to users. The lack of taint analysis data is unusual for a plugin of this size and could mask hidden risks, though no critical or high severity flows were detected.