via pluginvulnerabilities.com => original post link
Previously, we discussed why WordPress plugin developers should have a security review of their plugin done and when it would be a good idea to get another one. That raises another question; how should you pick out someone to do a review of your plugin?
That is an important consideration, as we have gone to contact plugin developers about security vulnerabilities in their plugins and found that they were offering to do security reviews. That they haven’t even secured their own plugins seems like a good indication they wouldn’t be the right ones to do security reviews of other plugins. [Read more]