OpenGraphiq Lite Security & Risk Analysis

The OpengraphIQ Lite v1.0.0 plugin exhibits a concerning security posture primarily due to its unprotected AJAX handlers. While the plugin demonstrates good practices in other areas, such as using prepared statements for all SQL queries and having no recorded vulnerabilities, the presence of four AJAX handlers without authentication checks represents a significant attack vector. This means that any user, including unauthenticated visitors, could potentially trigger these functions, leading to unintended consequences or unauthorized actions if the handlers themselves have exploitable logic. The static analysis shows no critical or high severity taint flows, and output escaping is at a moderate level (62% properly escaped), which is a weakness but not critical in isolation given the absence of other major issues. The lack of any historical vulnerabilities is a positive sign, suggesting a generally stable codebase, but it does not mitigate the immediate risks posed by the unprotected entry points.