The author has already pushed out a newer version 3.0.3. In the changelog it reflects the needed fixes. "3.0.3 Fixed a security issue. (Thanks to mickaelb for reporting and Konstantin Kovshenin for providing the fix).