WPDeeply
Plugin Security
How to evaluate, replace and remove WordPress plugins.
A plugin is code you did not write, running with full access to your database and file system. These guides cover how to judge one before you install it, and how to tell when it is time to move on.
Start here
- How to check if a WordPress plugin is safe
- Should you delete inactive WordPress plugins?
- How to replace an abandoned WordPress plugin
- What it means when a plugin is removed from WordPress.org
- How long is too long without a plugin update?
The short version
Check when it last updated, whether its listing is still open, whether anything is unresolved, and whether you actually need it. Three of those four are visible in the plugin checker; the fourth is a judgement call only you can make.