I do not know whats going on, but wordfence published a report which had a lot of alarming details. If the plugin is sold already, its likely that the original owners have no control over it. I am pretty scared by what sort of spam it must have been causing.