This plugin has allowed my blog to be hacked. When I have it enabled I can't login and my login pages are being redirected to a romanian site. When I disable it, all is good. I deleted the files and I am now able to login to my site.
I would not use this plugin until the author can ensure that these things have been fixed. I will comb through the code now to see what I can find.