Question

Are there any security issues in WordPress plugins?

Answer 1

54.4% of all WordPress security vulnerabilities disclosed in 2021 are called Cross-site scripting or XSS attacks. Cross-site scripting vulnerabilities are the most common vulnerability found in WordPress plugins.

use always a security plugin