Ref: https://doc.tiki.org/Plugin-Security
Some plugins locations are unknown and added by anonymous (even if anonymous is not allowed to add content)
See https://dev.tiki.org/tiki-plugins.php as an example
There is something odd. Please review.