MintNFT Plugin Security & Risk Analysis

The mintnft plugin v1.1.0 presents a significant security risk due to its extensive unprotected AJAX handlers. With 28 AJAX handlers and none of them implementing authentication checks, any unauthenticated user can potentially trigger these functions, leading to a large attack surface. While the static analysis found no critical or high severity taint flows and SQL queries utilize prepared statements, the lack of capability checks and nonce verification on these numerous entry points is a major concern. The plugin also shows external HTTP requests, which could be exploited if not handled carefully. The absence of any recorded vulnerability history is positive, suggesting good development practices in the past, but it does not mitigate the immediate risks identified in the current code analysis. The plugin's strengths lie in its use of prepared statements for SQL and a majority of properly escaped output. However, these are overshadowed by the critical exposure of its AJAX functionality. A recommendation for immediate remediation is to implement proper authentication and authorization checks on all AJAX handlers.