ReviewsTap Security & Risk Analysis

The reviewstap plugin, in version 1.1.3, exhibits a mixed security posture. While it shows strong adherence to output escaping best practices and a clean slate regarding taint analysis and critical/high severity vulnerabilities, several areas warrant attention. The complete lack of capability checks on its sole entry point (a shortcode) and the use of raw SQL queries without prepared statements are significant concerns. The plugin's vulnerability history, though currently clear, previously had a medium severity CSRF vulnerability, indicating a need for ongoing vigilance. The limited attack surface is a positive, but the identified weaknesses in input validation and SQL handling could potentially be exploited in conjunction with other factors.