Relevanssi Light Security & Risk Analysis

The relevanssi-light v1.2.2 plugin exhibits a generally good security posture, with a clean vulnerability history and a limited attack surface. The absence of known CVEs and a lack of critical or high-severity taint flows are positive indicators. The plugin utilizes prepared statements for a majority of its SQL queries, which is a good practice. However, there are notable areas for improvement. The most significant concern is the complete lack of output escaping for all identified output points. This could lead to cross-site scripting (XSS) vulnerabilities if user-controlled data is reflected directly in the output without proper sanitization. Additionally, while there are no unauthenticated AJAX handlers in this version, the presence of capability checks is zero, which, in combination with the AJAX handlers, suggests a potential oversight in ensuring that sensitive operations are only performed by authorized users. The limited number of total flows analyzed in taint analysis also means the coverage might not be exhaustive.