[BUSINESS] how risky are WP plugins

[cimage]

Just thinking are plugins always safe or is there a risk to adding them to a WordPress blog.

[viking]

Depends on who wrote it, are they reputable a big company or some kid in their mommies basement.

[TheButcher]

There is always a risk associated with adding more code to any website.

[Sebs]

There is always a risk associated with adding more code to any website.

Petty much how I feel about it

[HeidiHoe]

There are two sides to most things. Make sure the plugin is from a reputable source, is necessary and adds value before you add it. If you do add it, keep it updated. If it's no longer being kept up to date remove or replace it.

All plugins are is bits of code adding additional functionality to your site. More code can mean possible conflicts, additional security risks, longer load time, etc. Assess your need before you add.

[bestfreeporn]

There are two sides to most things. Make sure the plugin is from a reputable source, is necessary and adds value before you add it. If you do add it, keep it updated. If it's no longer being kept up to date remove or replace it.

All plugins are is bits of code adding additional functionality to your site. More code can mean possible conflicts, additional security risks, longer load time, etc. Assess your need before you add.

+1 for truth

[vblogger]

Here is my rule of thumb, keep them to the minimum you need.

[jag]

Quite honestly I can not think of any incident I had on my server due to a plugin, now other traffic scripts have given me trouble in the past.

[monsta]

Some of my blogs were hacked last year but not because of any plugins that i discovered.

[Colmike7]

Some of my blogs were hacked last year but not because of any plugins that i discovered.

A lot of times people can hack WP blogs with vulnerabilities in MySQL, especially older versions, then find a vulnerable table and do an injection, definitely doesn't have to be through a plugin and being "hacked" means many different things. :p

Best way to stay 100% "safe" from plugins is to write your own PHP.

[Mitch]

Best way to stay 100% "safe" from plugins is to write your own PHP.

easy for you to say when you know php.

[koster]

The well known ones in use with thousands of users would be the safest Others would have discovered problems.

[Slim]

The well known ones in use with thousands of users would be the safest Others would have discovered problems.

you can [/thread] he is right.

[Webby]

Not me none of the plugins gave me trouble

[gotonudecom]

Just thinking are plugins always safe or is there a risk to adding them to a WordPress blog.

There is always a risk. It does not matter who wrote the plugin.
For example:
Yoast had a an issue just last year. I think it was an injection issue.
Woocommerce has issues all the time, they just fix them quick.

Another example
https://blog.sucuri.net/2018/11/erealit ... ility.html

Last time I had a site hacked was through the shared server, through ftp from another persons account. Get off shared servers.

There have been cases where malicious people have bought popular WP plugins and then added malicious code. WP attempts to deal with these people quickly.

I do my best to only use plugins from the WP repository and through companies I trust. I really like the ones I trust that also have affiliate programs!!!
FYI, I rarely, if ever promote an affiliate program where I am not using the software or services. eg. https://1.envato.market/moVv1

The solution is easy.
OFF SITE backups and often.

https://updraftplus.com/

Notice that this is NOT an affiliate link. Thus I must really like this company.