ShiftNav – Responsive Mobile Menu Security & Risk Analysis

The ShiftNav Responsive Mobile Menu plugin, version 1.8.2, exhibits a generally good security posture with several strengths. The absence of raw SQL queries, file operations, and external HTTP requests are positive indicators. Furthermore, the presence of nonce and capability checks, while limited, suggests some awareness of secure coding practices. Taint analysis also shows no identified vulnerabilities in this area, which is a significant strength.

However, there are notable concerns, particularly regarding output escaping. With only 31% of outputs being properly escaped, there's a substantial risk of Cross-Site Scripting (XSS) vulnerabilities. The plugin's history of two medium-severity XSS vulnerabilities, with the most recent being surprisingly in the future (2025-06-05), also indicates a recurring issue with input sanitization and output neutralization. While there are no currently unpatched CVEs, the pattern suggests a potential for future XSS flaws if output escaping isn't addressed.

In conclusion, while ShiftNav 1.8.2 demonstrates some good security practices, the low percentage of properly escaped output is a significant weakness. This, combined with its historical XSS issues, presents a moderate risk. The plugin's attack surface is small and largely protected, which is positive, but the output escaping deficiency needs immediate attention to prevent potential XSS attacks.