via pluginvulnerabilities.com => original post link
The various testing we do of WordPress security plugins shows that they often fail to provide protection against vulnerabilities in other WordPress plugins, despite it being possible for them to have provided protection against those vulnerabilities. So what is going wrong? We can answer part of that, as we have identified five issues that cause them to fail to provide protection when they could. But why those issues are not getting addressed is something that is much more complicated to answer, so in this post we will focus on the issues that cause a failure to provide protection.
They Don’t Have Any Protection
Many WordPress security plugins don’t actually have any protection against vulnerabilities in other plugins being exploited. That doesn’t mean the developers don’t promote the plugin as if it they do. One very popular plugin that doesn’t offer protection markets the plugin with the claim that with it you can “stop attacks on your website”. With another, less popular plugin, it is marketed with the claim that it will “prevent 0-day exploit attacks” despite not offering protection. [Read more]