WP BunVC Security & Risk Analysis

The 'wp-bunvc' plugin v1.1.6 exhibits a mixed security posture. On the positive side, it demonstrates good practices by using prepared statements for all SQL queries and has no recorded historical vulnerabilities. It also doesn't make external HTTP requests or contain dangerous functions. However, significant concerns arise from its attack surface and lack of security checks. The plugin exposes two AJAX handlers without any authentication or capability checks, which is a major security risk. Furthermore, only 25% of its outputs are properly escaped, meaning there's a high probability of cross-site scripting (XSS) vulnerabilities. The absence of nonce checks on AJAX actions is particularly alarming, leaving the plugin susceptible to CSRF attacks. While there are no identified taint flows or dangerous functions, the critical gaps in authentication and output sanitization present substantial risks that could be exploited by attackers.