Recently on a fairly regular basis we have been interacting with developers of WordPress plugins that seem to believe that they have a better understanding of security than they actually do, which has lead to them either not fixing vulnerabilities or not making security improvements to their plugins that they really should be. What makes dealing with that more irritating
Source: Security Feed