Are there any security issues in WordPress plugins?

Are there any security issues in WordPress plugins?

54.4% of all WordPress security vulnerabilities disclosed in 2021 are called Cross-site scripting or XSS attacks. Cross-site scripting vulnerabilities are the most common vulnerability found in WordPress plugins.use always a security plugin