Findings
- The options form doesn’t escape the values it stores, but it’s not vulnerable because the form uses nonce fields
- Uses mail() instead of wp_mail()
- The CSS editor doesn’t appear to use nonce values and so it may contain a CSRF vulnerability
Reason for the 'Potentially unsafe' result
The plugin contains or is likely to contain a vulnerability which could be exploited by an end user and which would compromise the site’s confidentiality, integrity or availability:
Likely to contain a CSRF vuln in the “theme editor” (unrelated to the WordPress theme editor).