Hello
I'm Julio Potier and i'm Web Security Consultant, WordPress Expert.
I quickly find 2 vulnerabilities XSS and CSRF.
I won't give any details here, you can contact me [ email redacted ]
See you soon i hope !
[plugin name removed - Contact the developer directly]