Posts 2 Posts Security & Risk Analysis

The posts-to-posts plugin, version 1.7.8, exhibits a generally strong security posture based on the provided static analysis and vulnerability history. The plugin effectively protects its single AJAX entry point with nonce and capability checks, and there are no public REST API routes, shortcodes, or cron events that could serve as attack vectors. The absence of known CVEs and a clean vulnerability history further indicate a well-maintained and secure codebase.

However, there are areas for improvement. The single SQL query present is not utilizing prepared statements, which poses a moderate risk of SQL injection, especially if user input is directly incorporated into this query. Additionally, a significant portion of output escaping (50%) is not properly implemented, creating a risk of Cross-Site Scripting (XSS) vulnerabilities. The presence of a file operation also warrants attention, though without further context, its specific risk is difficult to assess.

In conclusion, while the plugin benefits from robust access control on its entry points and a clear history of security, the unescaped outputs and raw SQL query represent tangible vulnerabilities. Addressing these would elevate the plugin's security to a more comprehensive level.