Is the plugin hacked?

Tyche Softwares fixed this on february 18th, and this is stated in the ZDnet article above. But here’s the official word from the developer posted today: https://www.tychesoftwares.com/security-vulnerability-in-the-abandoned-cart-plugin/

So it seems that the only vulnerable sites are those that never updated to the latest version.

Hi

The latest version of the plugin does not contain the security vulnerability that was pointed out.

As mentioned by @denisgomesfranco, the fix was released on February 18th. So it is definitely safe to install & use the plugin. Just make sure to update it to the latest version.

:Vishal