I'm not sure if my question is appropriate here, apologies in advance but I am confused and need some helpful thoughts!

We were using this plugin for our site , which has recently been removed from the WordPress site, and replaced with a suggested alternative. The alternative is very expensive and beyond our budget.

My site recently got hacked, and some spam links were included in some of the plugin files, including this one.

As the plugin is no longer supported, and hence there won't be any security updates, is this a source of vulnerability?