Database Snapshots – WPvivid Security & Risk Analysis

The wpvivid-snapshot-database plugin v0.9.4 exhibits a concerning security posture primarily due to a significant number of unprotected AJAX handlers. The static analysis reveals 7 AJAX handlers, all of which lack authentication checks. This creates a substantial attack surface, allowing any user, including unauthenticated ones, to potentially trigger these functions. While the plugin shows strengths in other areas, such as a lack of dangerous functions, no file operations, no external HTTP requests, and a high percentage of output escaping, the unprotected AJAX handlers represent a critical weakness. The taint analysis, though limited in scope with only 4 flows analyzed, did identify 3 flows with unsanitized paths, indicating potential risks that were not classified as critical or high. The absence of any recorded vulnerabilities in its history is a positive sign, suggesting a generally stable codebase, but it does not negate the immediate risks identified in the current version's code. The presence of only one nonce check and two capability checks further highlights the inadequate security measures for its entry points.