vulnerable plugin protect