And in "overhauling" they introduced unauthenticated cross site scripting vulnerabilities. Oops!

https://www.wordfence.com/blog/2021/06/easily-exploitable-critical-vulnerabilities-patched-in-profilepress-plugin/

This is the other side of this issue of "popular free plugin take over and replacement" that I haven't seen discussed. These "overhauls" of what was an extremely popular simple and secure plugin, now has a massively larger vulnerability surface.