Are there any updates on the status of the review process? It seems like it has fallen through the cracks with the WordPress .org security team. Perhaps they should be contacted?
It looks like a fix was submitted by the plugin’s author over a week ago, but it’s still “pending review?” Is there any timeline for when the updated version will be made available to download?