WP Adsterra Dashboard Security & Risk Analysis

The wp-adsterra-dashboard plugin version 2.0.0 exhibits a generally strong security posture, particularly concerning its limited attack surface and the absence of known vulnerabilities. The static analysis reveals that all identified entry points, specifically AJAX handlers, are protected by nonce checks. The plugin also demonstrates good practices in output escaping, with a high percentage of outputs being properly sanitized, minimizing the risk of cross-site scripting (XSS) vulnerabilities.

However, a significant concern arises from the handling of SQL queries. The analysis indicates that none of the two SQL queries utilize prepared statements, which presents a substantial risk for SQL injection vulnerabilities. Although no taint flows with unsanitized paths were found, the lack of prepared statements is a critical oversight that could be exploited if user input is directly incorporated into these queries. The absence of capability checks on AJAX handlers, while mitigated by nonce checks, could still be a point of consideration for further hardening, though it's less critical than the raw SQL queries.

Given the lack of historical vulnerabilities, it suggests the developers may be diligent in addressing past issues or that the plugin has not been a significant target. Nevertheless, the current code analysis highlights the critical need to address the unescaped SQL queries. The plugin's strengths lie in its controlled attack surface and output sanitization, but its primary weakness is the direct use of SQL queries without prepared statements, which requires immediate attention to prevent potential security breaches.