YandexId Plugin Security & Risk Analysis

The YandexID v2.0 plugin demonstrates some good security practices, such as using prepared statements for all SQL queries and largely proper output escaping. However, significant concerns arise from its attack surface. Two AJAX handlers are exposed without authentication checks, creating potential entry points for malicious activity if they can be exploited. The absence of nonce checks on these AJAX handlers further exacerbates this risk, making them more susceptible to Cross-Site Request Forgery (CSRF) attacks.

The plugin has a clean vulnerability history with no known CVEs. This is a positive indicator, suggesting that the plugin has not historically been a significant target for severe exploits. However, the static analysis reveals a lack of fundamental security controls on critical entry points, which could lead to future vulnerabilities being introduced. The absence of capability checks and nonce checks on AJAX handlers are particularly worrying, as these are standard WordPress security mechanisms designed to prevent unauthorized actions.

In conclusion, while the plugin avoids common pitfalls like raw SQL queries and has a clean history, its unprotected AJAX endpoints represent a notable security weakness. The lack of essential checks on these entry points elevates the risk profile. Developers should prioritize implementing authentication and nonce checks on these handlers to mitigate potential exploitation.