Nulled means that software has been modified by a 3rd party to remove the requirement for a valid license. When a pirate nulls a Wordpress plugin, they also have the opportunity to modify the code to introduce backdoors, viruses, or malware.