VedicAstroAPI Security & Risk Analysis

The "vedicastroapi" v2.0.5 plugin exhibits a generally good security posture with several positive indicators. The complete absence of SQL queries and the high percentage of properly escaped output are strong points. Furthermore, the plugin has no recorded vulnerability history, suggesting a history of secure development. However, significant concerns arise from the attack surface analysis. The plugin exposes 36 AJAX handlers, and a substantial 12 of these lack any authentication checks. This presents a direct pathway for unauthenticated users to interact with potentially sensitive plugin functionality, increasing the risk of abuse. While no critical taint flows or dangerous functions were identified, the unprotected AJAX endpoints are a clear security weakness that should be addressed.