Related Post Shortcode Security & Risk Analysis

The "related-post-shortcode" v1.2 plugin exhibits a concerning security posture, primarily due to a significant number of unprotected entry points. While it demonstrates good practices in SQL query handling with 100% prepared statements and avoids dangerous functions and file operations, these strengths are overshadowed by security oversights. The static analysis reveals 6 AJAX handlers without any authentication checks, creating a large attack surface vulnerable to unauthorized access and manipulation. Furthermore, only 43% of output is properly escaped, indicating a potential for Cross-Site Scripting (XSS) vulnerabilities. The plugin's vulnerability history is also a significant concern, with one unpatched medium-severity CVE related to XSS, last recorded in early 2025. This suggests a recurring issue with input sanitization or output escaping, which has not been adequately addressed in this version. The lack of nonce checks on AJAX handlers further exacerbates the risk of CSRF attacks. In conclusion, while the plugin has some positive security aspects, the numerous unprotected AJAX endpoints, insufficient output escaping, and a recent XSS vulnerability history present substantial risks that require immediate attention.