Apr 18, 2015 Why so many WordPress plugins are vulnerable? Look at any week of WordPress plugin disclosures on WPScan and the same handful of bug classes keep coming back: cross site scripting, SQL injection, missing authorization, cross...