Hello,
I think I had an similar issue today. During a sitespeed.io test I got strange image errors. Searching for the reason I found that in the cached files the host of the urls have been replaced. After disabling the cache the site worked normally again. I would guess that there is any kind of vulnerability allowing to inject data in cached files.
I hope you will find a solution so that i can reactivate the plugin again.