uCalc Security & Risk Analysis

The ucalc v2.0.1 plugin exhibits a mixed security posture. On the positive side, it shows no known historical vulnerabilities and utilizes prepared statements for all SQL queries, which is a strong security practice. Additionally, it avoids dangerous functions, file operations, and external HTTP requests, and has a single nonce check in place. However, there are significant areas of concern, primarily related to its attack surface. The plugin exposes two AJAX handlers without authentication checks, creating potential entry points for unauthenticated users. While the taint analysis showed no issues, the presence of unprotected AJAX handlers means that any data processed by these handlers could be manipulated if a vulnerability were to exist in the handling logic itself. The output escaping is also a concern, with only 65% of outputs properly escaped, leaving room for potential cross-site scripting (XSS) vulnerabilities.