In reply to mark k..

Those plugins are useful to some people that require the ability to run custom PHP code. It's not the plugin's fault that the API was exploited.