Mooberry Book Manager Security & Risk Analysis

The mooberry-book-manager plugin v4.16.2 presents a mixed security posture. On the positive side, it demonstrates good practices with a significant number of SQL queries utilizing prepared statements and a high percentage of properly escaped outputs. The absence of critical or high-severity vulnerabilities in its history, along with no currently unpatched CVEs, is also encouraging. The plugin does not bundle any external libraries, reducing the risk of outdated dependencies. However, there are notable concerns stemming from the static analysis. The presence of 3 AJAX handlers without authentication checks creates a direct attack vector. Additionally, 3 taint analysis flows with unsanitized paths, while not classified as critical or high, indicate potential risks of data manipulation or unauthorized access. The plugin also has a medium-severity vulnerability in its history related to information exposure, even though it is currently patched, which warrants attention for potential reoccurrence. Overall, while the plugin has made efforts towards secure coding, the unprotected entry points and unsanitized data flows require remediation.