I updated the plugin via WP admin panel yesterday, and today woke up to see that the posts from my DJD form are publishing even though I have the plugin set to save them as drafts for my editing/approval! It wouldn't be so bad, but I also have plugins installed that auto-Tweet and Facebook every post when it's published, so I had spam posts published not only on my blog, but also to my Twitter and Facebook.
I tried setting the plugin to have frontend posts saved as "pending review," but that doesn't seem to work, either. Everything is just going straight to "published" no matter what. I'd love to let you see it live on my site, but you'll just have to trust me, because I had to take the page/frontend post form down to avoid any more spam being posted to my site, Twitter, and Facebook for all to see.
Also not happy that the new update seems to have done something to force the form shortcode to display on top of any text written into the page itself. I had a short "what's this for" type of intro on what type of content I wanted guests to contribute, but after the update, the form displays above that, no matter how I set things up on the page (I even tried slapping everything into a table with the text in a row above the form shortcode, but it didn't help).
Very unhappy with this update!