WP Light Heatmap Security & Risk Analysis

The wp-light-heatmap plugin v1.0.0 presents significant security concerns due to a large number of unprotected entry points. With all 8 AJAX handlers and 1 REST API route lacking authentication checks, an attacker could potentially execute arbitrary actions or access sensitive data without proper authorization. The taint analysis revealing two high-severity flows with unsanitized paths further exacerbates this risk, indicating a strong possibility of code injection or data manipulation vulnerabilities.

While the plugin has a clean vulnerability history with no known CVEs, this should not be interpreted as a sign of robust security. The absence of past issues could simply be due to a lack of thorough security auditing or exploitation attempts. The plugin's strengths lie in its limited use of dangerous functions and a decent percentage of SQL queries using prepared statements, along with properly escaped outputs. However, the lack of nonce checks on AJAX endpoints and capability checks on its entry points are critical oversights that undermine its overall security posture.