wnokta nginx cache Security & Risk Analysis

The "wnokta-nginx-cache" v1.0.0 plugin presents a significant security risk primarily due to its unprotected AJAX handlers. With 4 AJAX handlers and 0 capability checks or nonce checks on any of them, these entry points are wide open to any authenticated or even unauthenticated user, depending on WordPress's default AJAX permissions. While the plugin uses prepared statements for its SQL queries and has no recorded vulnerability history, these strengths are overshadowed by the critical flaw in its handling of AJAX requests. The taint analysis also shows flows with unsanitized paths, which, while not classified as critical or high severity, are concerning given the lack of output escaping. None of the 30 outputs are properly escaped, meaning any data processed and displayed through these outputs could be vulnerable to cross-site scripting (XSS) attacks. The plugin's file operations and external HTTP requests also contribute to a larger attack surface that lacks proper validation. Overall, while the SQL usage is good and there's no historical vulnerability data, the plugin's current state is insecure due to exposed AJAX endpoints and insufficient output sanitization.