In reply to Plugin Vulnerabilities.

We contacted the developer about that over the weekend, but we haven’t gotten a response and so far it hasn’t been addressed

and

Ninja Forms did not post about the security update on its blog or social media accounts

This type of behaviour is inexcusable and very telling. It’s all about trust. Ninja Forms: off you go straight onto the blacklist.