Official WordPress Plugin Checker offers automated code review for security and best practices. Don't vibe code plugins without it.
Formidable Forms WordPress flaw enables unauthenticated attackers to pay a small amount and have a more expensive transaction marked as paid.