Sky Login Redirect Security & Risk Analysis

The 'sky-login-redirect' plugin v4.1.6 exhibits a generally good security posture due to the absence of known vulnerabilities and the consistent use of prepared statements for all SQL queries. The plugin also demonstrates strong output escaping practices with 92% of outputs properly escaped, and the presence of nonce and capability checks on its entry points. However, there are significant concerns regarding its attack surface. Two of the three identified entry points, specifically AJAX handlers, lack authentication checks. This creates a potential avenue for unauthorized actions if these handlers can be triggered by unauthenticated users. The lack of recorded vulnerabilities in its history is a positive sign, suggesting a developer who may be attentive to security, but it doesn't entirely mitigate the risks posed by the unprotected entry points.

In conclusion, while the plugin has commendable secure coding practices in place for data handling and output, the unprotected AJAX endpoints present a notable security weakness. The absence of known CVEs is reassuring, but the uncovered attack surface warrants attention. It is recommended that the developer implement robust authentication and authorization checks on all AJAX handlers to fully secure the plugin.