The plugin itself does not contain a virus, however like any other piece of software it is at risk of for malware and hacking. This is why when we install a plugin, we have a list of top plugins that are secure. Additionally, it is important to remember that the more plugins you add to your WordPress site, the greater the change of hacking.