[BUSINESS] how risky are WP plugins

[AlexO]

As with all codes they can be a risk but most coders who write plugins for WP are honest people.

[Kev]

Just thinking are plugins always safe or is there a risk to adding them to a WordPress blog.

Safe in all the years I have been using them

[LuKenGas]

As with all codes they can be a risk but most coders who write plugins for WP are honest people.

Yep yep

[DonMK]

A lot of times people can hack WP blogs with vulnerabilities in MySQL, especially older versions, then find a vulnerable table and do an injection, definitely doesn't have to be through a plugin and being "hacked" means many different things. :p

Best way to stay 100% "safe" from plugins is to write your own PHP.

Yes to the first part and no way Joe to the 2nd part in my case

[ZR1]

If some one wants to hack a site and they have half a clue they can do it in multiple ways.

[Colmike7]

If some one wants to hack a site and they have half a clue they can do it in multiple ways.

The hard part is not getting caught..

[TheButcher]

If some one wants to hack a site and they have half a clue they can do it in multiple ways.

The hard part is not getting caught..

It happened to me yesterday not through WP or a plugin, the techs fixed it in less than an hour. Shit happens that's the web.

[Colmike7]

If some one wants to hack a site and they have half a clue they can do it in multiple ways.

The hard part is not getting caught..

It happened to me yesterday not through WP or a plugin, the techs fixed it in less than an hour. Shit happens that's the web.

Oh yeah, there are tons of ways to do it and plugins are mostly the easy/lazy way where you just make a semi-popular plugin, then change things on an update when it's time to strike. Hell, you can even get backdoored plugins from Jetpack.
Other people will just go on Tor and search for .onion sites with public breach info then say shit like "I hax0r3d your shit" when they just looked it up.

I miss when people used WEP more, though. That is so easy to get PWs with, just have to wait a while for a 'handshake' packet.

Many ways to do many thing. At Apple, I used to take control of other employees' computers, turn the volume up all the way then make AppleTalk say weird things to scare them. All because they kept saying that you can't hack a Mac. :p

Also, this isn't really hacking, but Radmin can be fun at school..

[dom_trev]

File permissions, handle those you should be fine

[T.B.W]

Not had a problem with any over the years

[trafficseller]

Not had a problem with any over the years

Plus 1

[ispdn]

Keep them to the minimum and delete any you do not use.