Plugin Inspector plugin is easy way to check plugins installed on your WordPress and make sure that plugins do not use deprecated WordPress functions and some unsafe functions like eval, base64 decode, system, exec, etc.
Some of those functions may be used to load malicious code from the source directly to the site or WordPress database..
Plugin Inspector allows you to view all the deprecated functions complete with path, line number, function name, and the new recommended function to use.
Upload Plugin Inspector to the in your WordPress installation..
Generally, most of those functions are safe, but under certain circumstances those functions may be used to hack site or to load and execute malicious code.
One of the things that I read on the site of our firewall provider was to check the code of our plugins one by one..
The idea is to present risk score in the list that would for example be calculated like this.
That and way to order the list based on the score, which would make it clear.
Browse the code, check out SVN repository, or subscribe to the development log by RSS...
Added cool and convenient code viewer to view found issues in PHP code..
Read more