Malicious WordPress plugin steals your admin password, and you didn’t even know ?

Now, how would you react knowing that the plugin that you had used for ages emailed your admin login credentials to the plugin developer and you didn’t even know ?
Scary – isn’t it ? Well, that’s just what happened to this blogger Sven.

Sven reports in his post that while experimenting with a few plugins he found that a plugin (Pushit) plugin actually emailed his admin id and password to an email.
Now, this could have been an oversight or a mistake but its a serously scary thought.

What can you do to make sure that your WordPress plugins are “safe” ?

Quite honestly, I don’t know of anything that will give us a 100% security but there are certain things you can do for sure.
1. Install and run plugins only from developers who have a good reputation.
2. Always test the plugin on a demo/test blog.
3. Look for plugin reviews on the plugin page(usually developers blog) comments, or elsewhere on the web.
4. Never install plugins not tested with your version of blog software.

WordPress plugins are great resources and probably one of the USPs for us liking the software as millions do. But blindly trusting all of them could also land us in trouble, just a word of caution to all.

Possibly related SEO & Social Media Articles

• The best Wordpress Plugin developers of 2008
  Here is a nice list I found the other day. W-Shadow has put up a top 10 list of the best Wordpress plugin developers of 2008, based on plugin popularity and number of plugins developed. I think it’s a very apt and true list. Check out the plugins from these authors, they’re all cool. Michael Torbert [...]...
• Wordpress plugin to replace post titles with fancy fonts
  Dinu, a fellow blogger from Cochin is pretty impressed with Amy Mahon’s  wordpress theme over here, and was wondering what’s that funky text doing at the post titles ? Watch closely and you’ll find that the post titles are replaced with cool text effects rather than the plain text. Right click on the title and you’ll [...]...
• Add a Twitter button on your posts – Wordpress plugin, “Tweet this”
  Now, that you and your friends are tweeting more these days, it’s not alarming to see someone come up with the plugin. And that someone is – Richard X Thripp, and the plugin in a simple wordpress one, that adds a cute twitter bird image on top right corner of all of your posts, which [...]...
• A Wordpress plugin that help fight scrapers and copycats
  Scrapers/ Sploggers and copy cats are the names you’d never want to hear these days. Simply because every blog has a splogger who’s scraping your content from the RSS feeds everyday.There are lot of tools available to fight scrapers, and here’s a brand new plugin for Wordpress that’ll help you to fight scrapers. It’s the categories Autolink [...]...
• A wordpress plugin that will help you make money from your blog
  Wordpress plugins are made keeping in mind the utility and functional aspects of your blog. Sometimes, they turn out to help you make money from your blog as well. Here is a great plugin which was meant for something else but ultimately will help you make money online. This wordpress plugin is actually made for making [...]...