Ultimate Member Followers Addon

What I Found / Risk Context The Followers Addon is a third-party extension for Ultimate Member that allows users to follow / unfollow each other, show follower/following lists, etc. Because it's an add-on, its security depends heavily on how well it’s coded in relation to Ultimate Member’s APIs, permission checks, sanitization, etc. No public CVE or major vulnerability report specifically targeting version 2.3.2 appears in the usual vulnerability databases (at least in my search). Because add-ons often rely on the core plugin’s security (Ultimate Member), vulnerabilities in the core plugin or in user-input handling can affect the add-on. Potential Risk / Weakness Areas to Inspect in Version 2.3.2 Here are places where vulnerabilities might sneak in when using Followers Addon 2.3.2: Missing Capability / Permission Checks Follow/unfollow operations should verify the current user is allowed to follow/unfollow. If not checked properly, users could manipulate other users’ relationships. Display of follower/following lists or profile visibility should respect privacy settings or role restrictions. Input / Parameter Sanitization / Validation If the addon accepts parameters (user IDs, offsets, pagination etc.) from query strings or AJAX requests, these inputs should be strictly