Login With Ajax – Fast Logins, 2FA, Redirects Security & Risk Analysis

The login-with-ajax plugin, version 4.5.1, presents a mixed security posture. While it demonstrates good practices in areas like prepared SQL statements and a significant portion of output escaping, there are notable concerns. The presence of 7 unprotected AJAX handlers, out of a total of 11, represents a substantial attack surface that could be exploited by unauthenticated users. Although no critical or high severity taint flows were detected, the 2 flows with unsanitized paths warrant attention, as they could lead to unexpected behavior or potential vulnerabilities if not properly handled downstream.

The plugin's history of 6 medium severity CVEs, with common types including missing authorization, CSRF, and XSS, is a significant red flag. This pattern suggests recurring security weaknesses within the plugin's codebase, particularly in how it handles user input and authorization. The fact that none of these are currently unpatched is positive, but the historical trend indicates a need for ongoing vigilance and potentially more robust secure coding practices. Overall, while the plugin has some strengths, the unprotected entry points and historical vulnerability patterns indicate a moderate to high risk that requires careful consideration and prompt mitigation of identified issues.