Manage User Columns Security & Risk Analysis

The 'manage-user-columns' plugin version 1.0.6 presents a mixed security posture. While it demonstrates some good practices such as the absence of dangerous functions, file operations, and external HTTP requests, significant concerns arise from its handling of entry points and data sanitization. The plugin exposes two AJAX handlers, both of which lack authentication checks. This, combined with two taint flows identified as having unsanitized paths and rated as high severity, creates a substantial risk. The historical vulnerability data, including a past medium-severity Cross-Site Request Forgery (CSRF) vulnerability, suggests a pattern of security weaknesses that require attention. The presence of raw SQL queries without prepared statements further exacerbates the risk of SQL injection. Although the plugin has no currently unpatched CVEs, the combination of unprotected entry points, high-severity unsanitized data flows, and historical vulnerabilities points to a need for significant security improvements to mitigate potential attacks.