wp-authz-audit: find the reachable code, and what guards it
Find the WordPress plugin code an attacker can reach — and check whether anything is actually guarding it.
wp-hook-guard maps the entry points. wp-authz-audit goes a step further and asks, for the code an attacker can actually reach, what — if anything — is guarding it.
It traces from user-reachable entry points into the code they invoke, and reports the places where an authorization boundary should sit but does not.
What it does
- Follows reachable code paths inward from each entry point.
- Highlights sensitive operations with no guard between them and the attacker.
- Focuses review on the gap between “reachable” and “protected.”
Used together with wp-hook-guard it becomes a two-pass workflow: find the doors, then check which ones are unlocked.