Our website got hacked twice!

most likely it is not because of this plugin, see this article

However you can always report security issues to plugin author (please send details privately) or to plugins team, using this guide https://developer.www.ads-software.com/plugins/wordpress-org/plugin-security/reporting-plugin-security-issues/

No, I saw some harmful code in the popup’s insert js area. It was redirecting users to a website called belazyelephant.

Dear @mustafaxyz ,

Thank you for reporting this to us.

May I know which version of the plugin you are currently using?

Did you check your website via
Application Based Scanners (Plugins):

• Quettera
• GOTMLS
• WordFence
• Sucuri

So far you are the only one who reported this kind of issue so we need more details for further investigations.

Thank you.

Dear @mustafaxyz ,

Hope you’re fine.

We would very much appreciate having more details on the issue you faced. We would love to hear back from you.