Personalized Shortcodes Pro Security & Risk Analysis

The personalized-shortcode-pro v1.0.1 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices with SQL queries all utilizing prepared statements and no known past vulnerabilities, suggesting a generally stable development history. However, significant concerns arise from its attack surface. With 6 total entry points, 4 of which lack authentication checks (AJAX handlers), this plugin presents a substantial risk for unauthorized access and potential exploitation. The presence of external HTTP requests also warrants caution, as these could be vectors for further compromise if not handled securely. Despite the lack of reported vulnerabilities and taint analysis findings, the unprotected AJAX handlers are a critical weakness that could be easily exploited in a live environment.