Vet Your Plugins
Unlike WordPress core, plugins can have vulnerabilities quite frequently. It all depends on who wrote the plugin and where you downloaded it from. It’s your responsibility as the site manager to make sure that you are using well-written and vetted code. We’re going to cover how to vet code even if you aren’t a programmer.
Don’t worry, I’m not going to have you open a code editor and sift through code. Instead we can measure the trust level of a plugin by listening to our peers. Most plugins are available to you for free on the WordPress plugin directory (see http://lrnwp.com/plugins). Let’s look at one of my plugins, http://lrnwp.com/mobiledetect, on the directory.
WordPress offers a lot of valuable information on each plugin ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access