https://www.pluginvulnerabilities.com/2017/11/27/a-wordpress-plugin-having-ten-thousand-installs-doesnt-mean-it-will-have-been-reviewed-for-security/

When it comes to the security of WordPress plugins there are a lot of misconceptions out there (many times they are being repeated by security companies). One of them is that a more popular plugin is going to be more secure because it has been reviewed for security. Here is an example of this claim from a recent thread on Reddit:

Share This