Local Fonts Uploader – Upload & Host Any Font Locally for GDPR Security & Risk Analysis

The "local-fonts-uploader" plugin v1.3.0 demonstrates a mixed security posture. On the positive side, it exhibits strong practices regarding output escaping, SQL query sanitization (82% prepared), and has no recorded vulnerabilities or dangerous functions. The absence of file operations and external HTTP requests also reduces its attack surface in those areas. However, a significant concern lies in its attack surface, with 9 AJAX handlers identified, a substantial 7 of which lack authentication checks. This creates an easily exploitable entry point for attackers to potentially trigger unintended actions. While taint analysis and vulnerability history are clean, the high number of unprotected AJAX endpoints represents a concrete, immediate risk that needs attention.