Update Needed Security issues.

PS they are not at a wp user level so they are not visible from the plugin settings page for reviews. They seem to be in the database

Hello?

Thanks for the heads up.
What damage can this cause a website that uses this plugin?

I looked at my database at the wp_mdp_reviews table and saw nothing, but I just installed the plugin. It does not appear to be populated by the plugin author.

The auto generated reviews have 3rd party information to give authenticity to the reviews.