No plugin is 100% safe. But you can significantly reduce WordPress plugin vulnerabilities by learning to assess and select quality plugins before installing them. Pick plugins only from reputed marketplaces like CodeCanyon, the WordPress Plugin repository .