Our Team Members – Team Members WordPress Plugin Security & Risk Analysis

The "our-team-members" v2.4 plugin exhibits a mixed security posture. On the positive side, all SQL queries are properly prepared, and there are no identified taint flows or file operations. The plugin also implements nonce checks and uses the prepared statement method for its SQL queries, which are good security practices. However, several areas raise significant concerns. The presence of one AJAX handler without authentication checks, coupled with a complete lack of capability checks for any entry points, creates a substantial attack surface vulnerable to unauthorized access. Furthermore, a concerning 31% of output escaping is not properly handled, indicating a potential for cross-site scripting (XSS) vulnerabilities. The plugin's vulnerability history, while currently showing no unpatched CVEs, does include a past medium-severity vulnerability related to missing authorization, reinforcing the identified weakness in its authorization checks. The use of `unserialize` is also a red flag, as it can be dangerous if not handled with extreme care and sanitization. While the lack of critical or high-severity taint flows and unpatched CVEs is encouraging, the combination of an exposed AJAX handler, absent capability checks, and insufficient output escaping presents a notable risk.