I am using, well not was using, this plug-in on a site I was building for a client. It so happened that somehow the plug-in locked me out of my own dashboard, and revoked all of my administrative privileges. After frantically searching for a resolution, I succeed at retracting the changes the plug-in administered to my user account. But what I received upon reentering my dashboard was a feeling of shear horror, instead of relief which I had hoped for. Someone had created an administrator account during my absence, and deleted all of my site content. Luckily I had created a backup on my server for the site. I would refrain from using this plug-in until the security issues have been resolved.