I was wondering when you will be securing your extensions from this reported vulnerability? I currently have a live demo for this extension online, waiting for a potential client to view it and decide if they want to go with it, at which point I will purchase the support package. I cant keep a known vulnerable extension live on my server for very long.