The good folks over at Wordfence know thing or two about WordPress security and wrote great post about how attackers gain access to WordPress sites. As result, if you're someone who is fond of installing plugins without first conducting due diligence on the plugin code quality you're massively increasing the risk that you're opening up your site to plethora of entry points for vulnerability scanners to gain access to your website. Even WordPress plugin developers will make mistakes and due to the source nature of most WordPress plugins it's easy for potential attackers to spend time trying to find new vulnerabilities in plugins. In, the popular the plugin the bigger the motivation for hackers to find new vulnerabilities they can use to maximum effect on as many sites as possible. Just over 3 years ago we had Slider Revolution hack which affected hundreds of thousands of WordPress websites. While that was incident that lots of us will be aware of, there are many many more incidents that we rarely hear about. But the problem is that while plugin updates might be released to fix the issue, you're now running website. Aptly named, Easy Updates Manager is the I've found to be the easiest and most WordPress plugin for automatically updating all your other WordPress plugins
Read more