WP Sort Order Security & Risk Analysis

The wp-sort-order plugin v1.3.5 exhibits a mixed security posture. On the positive side, it has a relatively small attack surface with all identified AJAX handlers protected by nonce checks. The absence of file operations and external HTTP requests is also a good sign. However, significant concerns arise from the code analysis, particularly regarding output escaping and SQL query practices. With nearly half of the output not being properly escaped, there's a notable risk of Cross-Site Scripting (XSS) vulnerabilities. Furthermore, a substantial portion of SQL queries are not using prepared statements, which could lead to SQL injection vulnerabilities if these queries are not properly sanitized. The vulnerability history, while currently showing no unpatched CVEs, indicates a past medium-severity vulnerability, specifically missing authorization. This pattern, combined with the zero capability checks observed in the static analysis, suggests a recurring theme of authorization weaknesses that could be exploited.