Simple Htaccess Redirects Security & Risk Analysis

The "simple-htaccess-redirects" plugin v1.5.8 exhibits a concerning security posture primarily due to its unprotected AJAX handlers. While the plugin demonstrates good practices by not using dangerous functions, performing SQL queries with prepared statements, and having a clean vulnerability history with no recorded CVEs, the presence of four AJAX handlers that lack authentication and capability checks represents a significant attack surface. The taint analysis also revealed two flows with unsanitized paths, indicating a potential for privilege escalation or other malicious actions if these paths are exploited through the unprotected AJAX endpoints. The lack of nonce checks further exacerbates the risk associated with these AJAX handlers. Therefore, despite its otherwise clean track record and good coding practices in other areas, the unprotected entry points present a clear and present danger to WordPress site security.