Plugin-tag: brute force attacks