Findings
- At over 27,000 lines of PHP, this plugin is very large and so a light-touch inspection such as this cannot hope to uncover all potential issues
- Makes use of a non-HTTPS API: http://stock.siteorigin.com/wp-admin/admin-ajax.php?action=image_search