RSFirewall! Security & Risk Analysis

The rsfirewall plugin version 1.1.46 presents a mixed security posture. While it demonstrates strengths in its limited attack surface and the presence of nonce and capability checks, significant concerns arise from its output escaping and SQL query practices. The static analysis reveals that only 45% of output is properly escaped, indicating a potential for Cross-Site Scripting (XSS) vulnerabilities. Furthermore, while a majority of SQL queries use prepared statements, a substantial portion do not, which could lead to SQL injection if user-supplied data is not handled with extreme care. The taint analysis, although limited in scope, found unsanitized paths, suggesting a risk of path traversal if these flows are exploitable.

The plugin's vulnerability history, with two medium-severity CVEs related to path traversal and use of less trusted sources, reinforces these concerns. The fact that the last vulnerability was recently patched in 2025 suggests that while the developers are addressing issues, new vulnerabilities may emerge or have existed previously. The absence of currently unpatched vulnerabilities is positive, but the historical pattern of path traversal vulnerabilities is a recurring risk factor.

In conclusion, rsfirewall 1.1.46 has a somewhat robust framework with its contained attack surface and security checks. However, the prevalent lack of proper output escaping and the presence of raw SQL queries, coupled with historical path traversal issues, necessitate caution. While not critically vulnerable based on the provided data, these weaknesses represent significant attack vectors that could be exploited, especially in conjunction with the identified unsanitized paths.