The WPScan Vulnerability Database is an excellent resource for determining whether or not a certain plugin poses a security risk. It provides a list of plugins as well as any known vulnerabilities. You can also search for a plugin by name or filter all plugin vulnerabilities in alphabetical order.