Project Management, Bug and Issue Tracking Plugin – Software Issue Manager Security & Risk Analysis

The software-issue-manager plugin v5.0.1 presents a mixed security posture. While it demonstrates strong adherence to secure coding practices in several areas, such as 100% use of prepared statements for SQL queries and a high percentage of properly escaped output, significant concerns remain.

A notable area of risk is the substantial attack surface exposed by unprotected AJAX handlers. With 9 out of 29 AJAX endpoints lacking authentication checks, attackers could potentially exploit these entry points to perform unauthorized actions. The taint analysis further highlights this, revealing 2 high-severity taint flows with unsanitized paths, suggesting potential for data manipulation or injection vulnerabilities that could be leveraged through these unprotected endpoints.

The plugin's vulnerability history, while showing no currently unpatched CVEs, does indicate a past medium-severity Cross-Site Scripting (XSS) vulnerability. This, combined with the presence of the `preg_replace(/e)` dangerous function, which can be susceptible to code execution if not handled carefully, warrants continued vigilance. The outdated bundled Select2 v3.2 library is also a potential vector for known vulnerabilities.

Overall, the plugin has strengths in its data handling and output escaping. However, the significant number of unprotected AJAX endpoints and the identified taint flows represent critical security weaknesses that require immediate attention. Addressing these exposed entry points and ensuring all data is properly sanitized and authorized is paramount to mitigating risks.