Deal with malicious wordpress pluggins

Hello,

I am working in a SOC and our CASB often detect some wordpress pluggins and qualifies them as highly malicious. This detection occur when user browse on websites (files are not downloaded). I have checked on VirusTotal and Hybrid analysis but did not have much information and on url sandbox only saw codes. As the files are not downloaded, a part blocking through the CASB, are there other things that i can do, generally how do you deal with …

cybersecurity deal malicious wordpress