From the title, I assumed the plugin itself had security vulnerabilities. Nice to hear that wasn't the case.