Rocket Galleries Security & Risk Analysis

The "rocket-galleries" v0.2.0.2 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by exclusively using prepared statements for SQL queries and appears to have no known historical vulnerabilities. The attack surface is small, with only one shortcode identified as an entry point, and it doesn't perform external HTTP requests. However, significant concerns arise from the static analysis. The presence of five instances of `create_function` is a critical red flag, as this function is deprecated and can be a source of serious security vulnerabilities, including code injection. Furthermore, a concerning 52% of output escaping is not properly handled, which could lead to cross-site scripting (XSS) vulnerabilities. The taint analysis reveals three high-severity flows with unsanitized paths, indicating potential risks for attackers to manipulate file operations or data that could lead to unauthorized access or execution. The complete absence of capability checks on its entry points, coupled with the taint analysis findings, suggests that sensitive operations might be exploitable by unauthenticated users.