I don’t know which version of plugin is affected, because I found this holes at the site xato.net. So it was unknown for me which version of plugin was at that site, when I wrote this post in my MoBiC project. Possibly it was version before 2.9.0.

“antiselect” values are now unique and deleted once a successful comment has gone through.

I do appreciate your testing, however, and will admit that the images are quite readable (on purpose). But structurally the holes that you pointed out were addressed already.