Correctly toggle vulnerable plugins (can't be enabled!)