Not to be unkind, but if you continue using 2.6 it won’t matter what plugins you use, when the site gets defaced/exploited by any of a number of easy exploits. Your host won’t care for you much either if your site gets used to send out bulk spam.
Seriously, the responsible way to run WordPress is to keep it updated, fixing or replacing your plugins along the way.