Plugins devs, beware of injections

[mmz-001]

Thanks for the heads up. This might end up being a huge issue in the plugin ecosystem.