There is a security hole!!!

If you believe that you have located a security issue with a plugin, please contact the plugin’s developer privately with the details. Do not plaster them all over a public forum. That’s really irresponsible!

How can I do that? Where can I find his e-mail address? Or maybe, you could write him, because you’ve moderated my comment and I don’t have its text copy.

Check the plugin’s readme.txt file. There may be contact details in there. Or post in the plugin’s support forum asking the author to contact you over a security issue.

Finally, if all other contact options have failed, please send all details by email to plugins [at] wordpress [dot] org.