Save Your Website From Delisted WordPress Repository Plugins

As said by Otto (WordPress Core Contributor), when a plugin is pulled for a security exploit, there is a specific sequence of events that is supposed to take place.

1. The plugin is de-listed from the repository, to prevent further downloads of an insecure plugin.
2. If the exploit is accidental or not obviously malicious, the developer is notified via email. The email comes from a valid address (plugins at wporg) and can be replied to.
3. The plugin developer presumably fixes the exploit or tells us that it is an invalid exploit, updates the plugin in SVN, and emails back saying so.
4. We check it out, and either provide advice or re-enable the plugin.

When a plugin is removed it is no longer available for further downloads but no warning is provided if you have that plugin installed on your website.

Plugins can be removed for the following reasons:

1. they are found to break the GPL
2. they are found to break the directory rules
3. other plugins by the author are found to be a problem and all are removed pending investigation
4. the author asks for it to be closed
5. the author asks for it to be closed because they are re-releasing under a different name
6. it is being investigated after non-specific complaints
7. there is a security vulnerability

Now if the plugin has a security vulnerability the website could be vulnerable to being exploited until the plugin is deleted from the installation or a security update is released and applied.

Here comes the use of No Longer in Directory plugin that alerts you when installed plugins have been removed from the directory.

There was a debate on WordPress.org to include this thing in WordPress core, many voted for implementing that in WordPress. At the time being, you can make use of the given plugin to add a page to check if any plugins installed in your website are on delisted plugins list.