Radio Station by netmix® – Manage and play your Show Schedule in WordPress! Security & Risk Analysis

The "radio-station" v2.5.17 plugin exhibits a mixed security posture. While it demonstrates strong adherence to best practices in SQL query preparation (94% prepared) and output escaping (98% escaped), a significant concern arises from its attack surface. A substantial number of AJAX handlers (21 out of 31) lack authentication checks, presenting a wide gateway for unauthorized actions if exploited. Furthermore, the taint analysis reveals 29 flows with unsanitized paths, including 4 identified as high severity. This, combined with a history of 3 medium-severity CVEs, including Cross-Site Request Forgery and Cross-Site Scripting, suggests a recurring pattern of vulnerabilities that, if left unaddressed, could lead to serious compromises. The plugin also bundles the Freemius library v1.0, which might be outdated and present its own set of risks. Overall, the plugin has strong foundations in secure coding for common web vulnerabilities, but the lack of robust authentication on numerous entry points and the presence of high-severity unsanitized paths are significant weaknesses that require immediate attention.