Previous plugin vulnerability

Hello,

I really like your plugin but my hosting made me aware that there was a plugin vulnerability a couple years ago (cross site scripting) which could lead to your site being hacked. I’m sure you have fully patched that and operate with more precautions nowadays since that, but of course any plugin which gives the ability to change user roles carries a risk.

Can you tell me, if I disable your plugin when it is not in use, does that minimse any potential risk? It would be great to know.

Thanks again