External Links – nofollow, noopener & new window Security & Risk Analysis

The wp-external-links plugin, version 2.63, exhibits a mixed security posture. While the static analysis indicates good practices such as 100% prepared SQL statements and a relatively small attack surface with no unprotected entry points, the vulnerability history raises significant concerns. The presence of three known medium-severity vulnerabilities, including CSRF and Cross-site Scripting, suggests a history of exploitable weaknesses. The fact that these vulnerabilities have been addressed and are currently unpatched is a positive sign, but the historical pattern indicates a need for ongoing vigilance and thorough security audits. The lack of identified taint flows in the static analysis is encouraging, but the past vulnerabilities highlight that such issues might have been present or overlooked in prior versions.