WP Map Builder/Styler Security & Risk Analysis

The "wp-map-builderstyler" plugin version 1.2.0 presents several security concerns despite having no recorded historical vulnerabilities. The static analysis reveals a significant number of unprotected entry points, specifically two AJAX handlers that lack authentication checks. This is a primary concern as it could allow unauthenticated users to trigger potentially malicious actions. Additionally, the taint analysis highlights two high-severity flows with unsanitized paths, indicating a risk of injection vulnerabilities if user-supplied data is not properly handled. While the plugin uses prepared statements for most SQL queries and doesn't perform file operations or external HTTP requests, the low percentage of properly escaped output (16%) is another notable weakness, potentially leading to cross-site scripting (XSS) vulnerabilities. The absence of nonce checks on AJAX handlers further exacerbates the risk associated with these entry points. The plugin's strengths lie in its limited number of entry points and the use of prepared statements for SQL. However, the lack of robust input validation and authorization on critical entry points, coupled with poor output escaping, creates a notable attack surface. The absence of historical CVEs is positive but does not negate the current code-level risks identified.