A summarized post about security research of WordPress plugins and the explorational audit spree which followed