Disable Vulnerable Plugins

[anon71687268]

@invisnet

if you automatically disable the plugin you might break their site, but if you leave it alone they may well get compromised.

If given a choice, I’ll always prefer that a vulnerable plugin breaks my site (or functionality) over compromising the entire site. There really shouldn’t even be a choice here.