Smartcat Translator for WPML Security & Risk Analysis

The "smartcat-wpml" v3.1.77 plugin exhibits a mixed security posture. On the positive side, the plugin demonstrates excellent output escaping, with 100% of outputs being properly escaped. It also shows a good practice in its SQL query implementation, with 76% of queries utilizing prepared statements. Furthermore, there are no currently unpatched vulnerabilities, indicating active maintenance. However, a significant concern arises from the attack surface. A total of 16 AJAX handlers were identified, with a staggering 15 of them lacking authentication checks. This creates a substantial entry point for potential attackers. Taint analysis revealed 2 flows with unsanitized paths, though these did not reach critical or high severity in this analysis.