Manual Completions for LearnDash Security & Risk Analysis

The 'manual-completions-learndash' plugin version 1.9 presents a mixed security posture. On the positive side, it demonstrates good practices by having all its AJAX entry points secured with capability checks and lacks any recorded vulnerabilities in its history. The absence of dangerous functions, file operations, and external HTTP requests is also commendable. However, there are significant concerns related to its database interaction and output escaping. A substantial portion of SQL queries are not using prepared statements, posing a risk of SQL injection if the input is not meticulously sanitized elsewhere. Furthermore, a significant percentage of outputs are not properly escaped, creating potential vulnerabilities for cross-site scripting (XSS) attacks.