There is another important lack : I used Mistape plugin on several sites and an update added malicious code. Review Team removed the plugin from depot… but there is no warning for plugin’s user. Thanks God I read some blogs about WP security and discovered the problem but I could have seen my sites compromised.