By installing this plugin on my website, I allowed thousands of spam messages to be sent through the form, as well as to my own email.
I promise, I used protection. I set it up with Akismet and a Quiz question.
Not only that, I'm pretty sure my blog was exploited through this plugin. Only after installing it was I hacked on multiple occasions via SQL injection. My admin account was hijacked each time.
I'm currently in a dispute with my hosting company for using excessive mail server bandwidth, as well as distributing thousands of spam emails.
So yes, this plugin could use some work.