Takayukiste, the author of the plugin, has released 1.9.5.1 fixing the vulnerability. If you have an old version of this plugin, it’s highly recommended that you update this plugin ASAP. You can read the discussion over on the WordPress.org forums here.