This plugin contains numerous issues of concern. There was not enough time within the confines of an inspection to properly investigate them all.
Reason for the 'Potentially unsafe' result
The plugin contains or is likely to contain a vulnerability which could be exploited by an end user and which would compromise the site’s confidentiality, integrity or availability:
This plugin is likely to contain an arbitrary code vulnerability.
These only apply to admin operations:
- Allows upload to third party servers of any file on the server
- Allows files to be saved to arbitrary file locations using the cache functionality.
- Allows enumeration of arbitrary file locations
- Echos content without sanitising it.