Please also note the following info about https://github.com/blueimp/jQuery-File-Upload plugin, which is included into the plugin (I received it from Igor Debatur, https://uploadcare.com/ ):
[...] a major security issue that affects websites and applications using the Blueimp jQuery File Upload library, which is used by your wp-yadisk-files repository.
Publicized on October 18th by the Akamai Security Intelligence Response Team and given the id CVE-2018-9206 soon thereafter, this vulnerability allows attackers to trigger remote code execution.
If you have not recently updated this library, you are very likely to be at risk of having your website or application compromised. The fix is to upgrade to the latest version and ensure that your Web server is configured to not execute files in the upload directory.
The exact details of who is affected and how to fix the vulnerability can be read here.