Plugin-tag: brute force attack