User Switcher Security & Risk Analysis

The "userswitcher" v2.0.0 plugin exhibits a mixed security posture. On the positive side, it demonstrates good practices regarding SQL queries, exclusively using prepared statements, and ensures all output is properly escaped. It also appears to handle file operations and external HTTP requests securely, with no identified taint flows of critical or high severity. The lack of any recorded vulnerabilities or CVEs in its history is also a strong indicator of a well-maintained and secure codebase over time.

However, a significant concern arises from the unprotected AJAX handlers. With a total of 4 AJAX handlers, all of which lack authentication checks, this presents a substantial attack surface. Any user, regardless of their logged-in status or role, can trigger these actions, potentially leading to unauthorized operations. While the code signals don't explicitly show dangerous functions or raw SQL, the absence of capability checks on these AJAX endpoints is a critical oversight that could be exploited if the AJAX actions perform sensitive operations.

In conclusion, while "userswitcher" v2.0.0 excels in data handling and output sanitization, its security is severely compromised by the presence of multiple unprotected AJAX endpoints. This weakness outweighs the strengths, making it a high-risk plugin despite its clean vulnerability history and good SQL/output practices.