About two minutes (that’s right, two minutes) after notifying this plugin‘s author about a potential security problem with the script, I had a reply and an offer to incorporate the fix. Talk about high-availability of two total strangers!