WP Mailto Links – Protect Email Addresses Security & Risk Analysis

The wp-mailto-links plugin, version 3.1.4, presents a mixed security posture. On the positive side, it demonstrates good practices by utilizing prepared statements for all SQL queries and includes nonce and capability checks for its entry points. The attack surface appears limited with no unprotected AJAX handlers or REST API routes.

However, several concerns warrant attention. The low percentage of properly escaped output (18%) is a significant red flag, indicating a high risk of Cross-Site Scripting (XSS) vulnerabilities, a pattern supported by its vulnerability history. While the static analysis found no immediate critical or high severity issues, the taint analysis reveals flows with unsanitized paths, suggesting potential weaknesses that could be exploited, especially in conjunction with improper output escaping.

The plugin has a history of two medium severity CVEs, with one currently unpatched, both related to XSS. This history, coupled with the low output escaping percentage, strongly suggests a recurring problem with handling user-supplied data securely, potentially leading to further exploitable vulnerabilities.