WP Admin Columns – Easy Admin Columns Builder for WordPress – Custom Post Types, Taxonomy, Users & More Security & Risk Analysis

The "post-type-column-editor" plugin, v1.0.5, exhibits a generally good security posture with several strengths. The plugin demonstrates strong practices regarding SQL query sanitization and output escaping, with 80% of SQL queries using prepared statements and 95% of outputs properly escaped. Furthermore, the absence of known vulnerabilities (CVEs) and critical taint analysis findings suggests a mature and well-maintained codebase. The use of nonces and capability checks on 8 and 2 entry points respectively also indicates an effort to secure the plugin's functionality.

However, a notable concern lies in the plugin's attack surface. With a total of 6 AJAX handlers, 3 of them lack authentication checks. This presents a potential entry point for malicious actors to trigger functionalities without proper authorization. While the taint analysis did not reveal any unsanitized paths with critical or high severity, the presence of unprotected AJAX endpoints warrants careful attention and potential remediation. The bundled Select2 library, while common, could also pose a risk if it's an outdated version, though this is not explicitly stated in the provided data.

In conclusion, while the plugin benefits from a clean vulnerability history and robust SQL/output sanitization, the unprotected AJAX handlers represent a significant weakness. Addressing these unauthenticated entry points should be the priority to further strengthen the plugin's security. The overall security is moderate, with a strong foundation but a specific area of vulnerability that could be exploited.