I've reached out to the dev and have offered to resolve the security issues for free! I'll update the post when/if things change.