ReferralYard Security & Risk Analysis

The ReferralYard plugin version 1.3 presents a mixed security posture. On the positive side, it demonstrates good practices by avoiding dangerous functions, utilizing prepared statements for all SQL queries, and having no recorded vulnerability history, suggesting a history of secure development. The absence of file operations and bundled libraries also reduces potential attack vectors. However, significant concerns arise from the analysis of its entry points and code signals. The plugin exposes one unprotected REST API route, which represents a direct and potentially exploitable attack surface. Furthermore, only 42% of output escaping is properly implemented, indicating a risk of cross-site scripting (XSS) vulnerabilities if user-supplied data is not handled with care before being rendered. While taint analysis shows no critical or high severity unsanitized flows, the combination of an unprotected endpoint and insufficient output escaping warrants careful consideration.