Nirweb support Security & Risk Analysis

The nirweb-support plugin v3.0.3 presents a significant security risk primarily due to its extensive attack surface of unprotected AJAX handlers. With 15 AJAX endpoints exposed without authentication checks, and 15 taint flows identified as having unsanitized paths with critical severity, there's a high probability of unauthorized access and data manipulation. While the plugin demonstrates good practices in using prepared statements for the vast majority of its SQL queries and incorporates nonce checks and capability checks, these strengths are heavily overshadowed by the critical vulnerabilities in its handling of user input and lack of authorization on key entry points.

The plugin's vulnerability history further exacerbates these concerns. Having two known CVEs, with one critical and currently unpatched, indicates a recurring pattern of severe security flaws. The common vulnerability types of Missing Authorization and SQL Injection are directly reflected in the static and taint analysis results. The recent nature of the last vulnerability (2025-01-31) suggests ongoing issues that have not been fully remediated. The overall security posture is therefore poor, with critical weaknesses that require immediate attention, despite some positive technical implementations within the code.