In reply to Rob Neu (@rob_neu).

I have called themes/plugins complete garbage. They were coded so badly. I then e-mailed the theme/plugin authors and told them how to fix the security issues. Not just WP authors.