Mobile Contact Bar Security & Risk Analysis

The mobile-contact-bar plugin, version 3.0.5, presents a mixed security posture. While it boasts a small attack surface and no identified critical or high severity taint flows, significant concerns arise from its handling of SQL queries and output escaping. All five SQL queries are executed without prepared statements, indicating a substantial risk of SQL injection vulnerabilities. Furthermore, the 13% of outputs that are not properly escaped introduce a potential for Cross-Site Scripting (XSS) attacks. The vulnerability history, including a past medium-severity XSS vulnerability, reinforces these concerns and suggests a pattern of inadequate input sanitization and output encoding, despite the absence of currently unpatched CVEs. The presence of a nonce check on the sole AJAX handler is a positive sign for that specific entry point, but the lack of capability checks on any entry points means that any user, regardless of role, could potentially interact with the AJAX handler. Overall, the plugin has strengths in its limited attack surface and recent vulnerability patching, but the prevalent use of raw SQL and unescaped output are significant weaknesses that require immediate attention.