How to check if a WP plugin is secure to use