Taxonomy Chain Menu Security & Risk Analysis

The plugin "taxonomy-chain-menu" v2.0.9 exhibits a mixed security posture with some concerning findings despite good practices in other areas. While the code generally employs prepared statements for SQL queries and has a high percentage of properly escaped output, the presence of two AJAX handlers without authentication checks represents a significant attack surface. This lack of authorization could allow unauthenticated users to trigger potentially sensitive operations. The absence of nonce checks on these AJAX handlers further exacerbates this risk. The plugin's vulnerability history, specifically the mention of a past Cross-site Scripting (XSS) vulnerability, indicates a potential for input sanitization issues, although this specific instance is no longer unpatched. The lack of taint analysis results is noted but doesn't negate the identified risks from the static analysis and vulnerability history.