I think that one year without addressing this major security concern is worth only one star:
In the back of my mind, I wonder isn't this what oAuth 2.0 is for?
In any event, beware using this plugin at version 3.1. Your gmail password is not only in plaintext in your wp_options table, but anyone with access to the wp-admin settings can view your password by inspecting the HTML in their browser.
You must log in to submit a review. You can also log in or register using the form near the top of this page.