I am glad that I did my research few years ago and I never used this plugin!

Backdoor in Captcha Plugin Affects 300K WordPress Sites