Should I install plugins to my WordPress installation from web sites having in URL “nulled” or, “null”?

No. This is a security risk. Not only morality question.

I checked some of these plugins and found most of all of these are infected. For instance, they will use base64encode functions and evaluate in the end to send info from your web site to URLs in Panama, Iran or like.

They may write to your license.txt or readme.txt files for instance, and in that way the hackers can get your credentials.

Note
There may be honest businesses having “null” or “nulled” in URL so I would like to enclose, since I meant specifically those web sites delivering hacked plugins.

Leave a Comment