User Blocker Security & Risk Analysis

The "user-blocker" v2.2 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and a high percentage of properly escaped output. The absence of critical or high-severity taint flows is also encouraging. However, significant concerns arise from the presence of an unprotected AJAX handler, which represents a direct entry point into the application without proper authentication or authorization checks. The plugin's history includes a medium-severity 'Injection' vulnerability, indicating past weaknesses in handling user-supplied data, even though it is currently patched. This, combined with the unprotected AJAX handler, suggests a potential for attackers to exploit these weaknesses if not addressed.