Site Search 360 Security & Risk Analysis

The "site-search-360" v2.1.8 plugin exhibits a concerning security posture due to a combination of code analysis findings and its vulnerability history. While the absence of dangerous functions and file operations is positive, the significant portion of SQL queries lacking prepared statements (100%) is a major red flag for SQL injection vulnerabilities. Furthermore, only 26% of output is properly escaped, increasing the risk of Cross-Site Scripting (XSS) attacks. The presence of an unprotected AJAX handler, despite the plugin having fewer total entry points, presents a direct and easily exploitable attack vector.

The vulnerability history reinforces these concerns, with two known medium-severity CVEs, one of which remains unpatched. The historical pattern of CSRF and XSS vulnerabilities indicates a recurring weakness in input validation and output sanitization, which aligns with the current code analysis. The lack of capability checks on any entry points is also a significant weakness, potentially allowing unauthorized users to trigger plugin functionalities.

In conclusion, while the plugin has some strengths like a relatively small attack surface and a low number of external HTTP requests, the prevalence of unescaped output, unsanitized SQL queries, an unprotected AJAX handler, and an unpatched CVE paint a picture of a plugin that requires immediate attention to address critical security flaws. The vulnerability history suggests a pattern of neglect in secure coding practices, necessitating a thorough review and remediation.