Mosaic Gallery – Advanced Gallery Security & Risk Analysis

The Mosaic Gallery Advanced Gallery plugin (v1.1.7) exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for all SQL queries and achieving a high percentage of properly escaped output. Furthermore, the absence of known CVEs and recorded vulnerabilities suggests a history of responsible development and maintenance. However, a significant concern arises from its attack surface. With 7 AJAX handlers, 5 of which lack authentication checks, there is a substantial risk of unauthorized actions being performed on the website if these handlers are reachable by unauthenticated users. The presence of 2 nonces and only 1 capability check further exacerbates this, indicating potential weaknesses in access control for these unprotected AJAX endpoints. While taint analysis revealed no critical or high severity unsanitized paths, the sheer number of unprotected entry points represents a tangible risk that could be exploited by attackers to trigger unintended functionality within the plugin.