I'm working on project where the I needed to provide enhancements to the password protection of the blog. Fast-forward -- I just had to re-hack the blog due to a login modification made via plugin.
The issue was that the plugin locked me out of the blog. Furthermore, there was no god-gate that would allow the admin back into the admin area in the event the plugin failed. Each of the plugins were "tested" for the current WP version.
Therefore, in the end the admin area was really hijacked if you think about it! Also these so called "coders" have no equity nor accountability for their failures or products. WP needs to restrict development of key area until strict adherence to CERT & Accountability measures have been met!
Blog not listed above!
Blog url: http://fiestatheseries.wordpress.com/