myCred – Learndash Security & Risk Analysis

The mycred-learndash plugin v2.3 exhibits a mixed security posture. On the positive side, the plugin demonstrates good practices regarding database interactions, with all SQL queries utilizing prepared statements, and a lack of file operations or external HTTP requests, which are common vectors for attacks. The absence of recorded vulnerabilities in its history is also a strong indicator of past security diligence. However, a significant concern arises from the substantial attack surface exposed through AJAX handlers. With 23 AJAX handlers, all of which lack authentication checks, a large portion of the plugin's functionality is exposed to unauthenticated users, creating a prime target for malicious exploitation. While the static analysis didn't reveal critical taint flows or dangerous functions, the sheer number of unprotected entry points is a considerable risk that could potentially lead to various vulnerabilities if not properly secured at the application level.