Findings
This plugin has been implemented in such a way that the codebase is going to be hard to maintain and debug, has been architected poorly and while it doesn’t currently have any vulnerabilities that we can see, there is the potential for vulnerabilities to be introduced and not identified for a significant time.
Reason for the 'Potentially unsafe' result
The plugin has been given this recommendation at the tester's discretion:
Plugin is poorly architected and the code is not particularly maintainable, introducing a risk that vulnerabilities could creep in, also this plugin is directly inserting javascript using static methods rather than keeping the js elements in libraries which would be easier to maintain and control what is being output.