The plugin was updated a few hours ago with v3.0.3, fixing for the vulnerability.

Apologies to everyone for the inconveniences caused.