In reply to Ron.

To be fair James Golovich's report says this:

For quite some time the WP Ninjas team has been busy doing a complete rewrite of the codebase to provide more flexibility in the future. Starting with version 2.9.36, a preview of the 3.0 code base has been included in the main plugin download and typically requires an administrator to manually enable that code for testing.

All of the following vulnerabilities are in the 3.0 code base and any version before 2.9.36 are NOT affected in any way.