sendwithus Security & Risk Analysis

The 'sendwithus' plugin version 1.1.0 exhibits a mixed security posture. On the positive side, it shows no known vulnerabilities in its history, uses prepared statements for all SQL queries, and has no recorded issues with file operations, external HTTP requests, or dangerous functions. However, significant concerns arise from its attack surface. The plugin exposes two AJAX handlers, both of which lack authentication checks. This directly creates a significant risk of unauthorized access and execution of plugin functionalities by unauthenticated users. Furthermore, the output escaping is relatively low at 24%, indicating a risk of Cross-Site Scripting (XSS) vulnerabilities if user-controlled data is not properly sanitized before being displayed.