Local Magic Security & Risk Analysis

The 'local-magic' plugin v2.9.0 presents a mixed security posture with several concerning aspects. While it shows some good practices like a high percentage of prepared SQL statements and no detected critical or high severity taint flows, the significant number of unprotected AJAX handlers (10 out of 10) is a major red flag. This large attack surface without proper authorization checks opens the door for various privilege escalation and unauthorized action vulnerabilities.

The plugin's vulnerability history is also a concern, with two known and currently unpatched CVEs, one of which is high severity. The common vulnerability types, including SQL Injection and Missing Authorization, directly correlate with the findings in the static analysis. The fact that these vulnerabilities are recent (last one in 2025) suggests an ongoing struggle with secure development practices.

Overall, the plugin's security is compromised by its unprotected entry points and its history of critical and high-severity vulnerabilities, particularly those related to authorization and SQL injection. While the static analysis did not reveal critical taint flows, the potential for exploitation due to missing authorization checks on AJAX handlers, combined with past vulnerabilities, makes this plugin a moderate to high risk.