Plugin is still affected and has been closed.
XSS
No
2019-05-16 (about 4 years ago)
2019-08-20 (about 3 years ago)
2020-09-22 (about 2 years ago)