In reply to Phil H..

There clearly are problems, since if there were not problems, there wouldn’t be any vulnerabilities in plugins in the first place.

If you look at what happened in the past couple of months with the plugin WP Easy SMTP and the Freemius library used in many plugins, hackers are finding vulnerabilities on their own and exploiting them. With the latter issue, there are still fairly popular plugins that haven’t been fixed and remain in the Plugin Directory nearly two months on.