NS AdBlock Blocker Security & Risk Analysis

The ns-adblock-blocker plugin, version 1.1.0, presents a mixed security posture. On the positive side, it demonstrates good practices by not utilizing dangerous functions, all SQL queries are prepared, and there are no recorded past vulnerabilities. This suggests a developer who is aware of common security pitfalls. However, significant concerns arise from its attack surface and output sanitization. Two of its three AJAX handlers lack authentication checks, creating potential entry points for unauthorized actions. Furthermore, only 9% of its output is properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities across many output points. Taint analysis also reveals flows with unsanitized paths, although these are not classified as critical or high severity, they still warrant attention.