The plugin was affected by an Auth Bypass vulnerability.