WP Export Categories & Taxonomies Security & Risk Analysis

The plugin "wp-export-categories-taxonomies" v1.0.3 presents a mixed security posture. While the static analysis shows a commendable lack of direct entry points like AJAX handlers, REST API routes, or shortcodes, and all SQL queries are prepared, there are significant concerns. A substantial portion (85%) of output is not properly escaped, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities. Furthermore, the complete absence of nonce and capability checks is a major security oversight, leaving any potential future additions to the attack surface highly vulnerable.

The vulnerability history is a critical red flag. With one known medium-severity CVE that is currently unpatched and a history of "Missing Authorization" issues, this plugin has demonstrated a pattern of weaknesses that could be exploited. The fact that the last vulnerability was recorded as 2025-12-31 suggests either a recent discovery or potential for future unaddressed issues. While the current static analysis doesn't reveal exploitable flows, the lack of fundamental security checks and the historical context point to a plugin that requires careful attention and immediate remediation of its existing vulnerabilities.