Web Directory Free Security & Risk Analysis

The "web-directory-free" v1.7.13 plugin presents a concerning security posture, primarily due to a large attack surface with a significant portion lacking proper authentication. With 73 AJAX handlers, 55 of which do not have authentication checks, a substantial number of entry points are exposed to unauthenticated attackers. The presence of 6 high severity taint flows indicates potential vulnerabilities where unsanitized input could lead to exploitable conditions. Furthermore, the plugin's history of 9 CVEs, including 2 critical and 2 high severity vulnerabilities of types like XSS, CSRF, SQL Injection, and PHP Remote File Inclusion, suggests recurring security weaknesses. While the plugin does utilize prepared statements for a good portion of its SQL queries and has a notable number of capability checks, these strengths are overshadowed by the high number of unprotected AJAX endpoints and the past history of critical and high severity flaws. The presence of `unserialize` also warrants caution, as it can be a vector for object injection if not handled carefully with untrusted input.