@pesquerra it would be really simple to find out who was sending the spam, instead of “assuming” something happened. I doubt very seriously Ben and his team at Kadence WP would do something like this. This would be disastrous for their business.
All you had to do is simply obtain the ORIGINAL email that you suspect was sent as spam and obtain the forensic of that email called the email properties (header) and that will show the TRUE sender.
Just my opinion, but providing a 1-Star Rating for what seems like a 4 to 5-star product based on an assumption just isn’t right. A STRONG accusation like that needs proof and the email header can provide it. Otherwise, it’s just your word against the community.