"Checkmarx...published a security vulnerability report on the top 50 plugins on the WordPress plugin repository...[and] concluded that more than 20% of the 50 most popular WordPress plugins were vulnerable to common web attacks..."

Best place to download plugins? "For starters, only download plugins from reputable sources. The most notable is the WordPress plugin repository."

Hmm.