Malware vulnerability in a version

Four sites using this plugin got hacked due to a known vulnerability. The patched version was not out before we were exploited. Its a cookie banner, how hard can it be to keep secure? I would stay away until the author does a full review.