UsersWP – Social Login Security & Risk Analysis

The "userswp-social-login" v1.5.6 plugin presents a mixed security posture. On the positive side, it shows a strong reliance on prepared statements for SQL queries and avoids external HTTP requests or file operations, which are common attack vectors. The absence of any recorded vulnerabilities in its history is also a promising sign of good development practices. However, significant concerns arise from the static analysis. The plugin has a total of 2 entry points, both of which are AJAX handlers lacking authentication checks. This directly exposes critical functionality to unauthenticated users, creating a substantial risk. Furthermore, the taint analysis revealed 3 flows with unsanitized paths, with one classified as high severity. This indicates a potential for attackers to manipulate input that is not properly validated or sanitized before being used in sensitive operations, possibly leading to code execution or data compromise. The lack of nonce checks on AJAX actions exacerbates this risk, as it provides an easy avenue for Cross-Site Request Forgery (CSRF) attacks. While the plugin avoids dangerous functions and has a relatively small attack surface in terms of shortcodes and cron events, the unprotected AJAX endpoints and unsanitized taint flows are critical weaknesses that need immediate attention.