There are a good number of inactive plugins that, according to WordPress Site Health’s recommendation, should be removed.
“Your site has 15 inactive plugins. Inactive plugins are tempting targets for attackers. If you are not going to use a plugin, you should consider removing it.” (7/5/2024)