Help Needed with OpenFire Plugin and User Registration Issue

[Shadow_Fax]

I have some issues with plugins; something happened with my OpenFire. I never installed this plugin, but it shows up every time I try to remove it. Does anyone know about this plugin? The name of this plugin is very strange—something like an encrypted name. Additionally, on the User Summary pages, I noticed that a couple of unknown users have been registered on my OpenFire server. These users have administrative privileges, even though I never installed any registration plugin.
I’m using Openfire 4.6.4. Could someone please help me with this issue?

Here is the image:

Notes:
If the image is not shown, right-click and open it in a new tab.

[speedy]

your installation may have been compromised.

CVE-2023-32315: Openfire Administration Console authentication bypass

We’ve had an important security issue reported that affects all recent versions of Openfire. We’ve fixed it in the newly published 4.6.8 and 4.7.5 releases. We recommend people upgrade as soon as possible. More info, including mitigations for those who cannot upgrade quickly, is available in this security advisory: CVE-2023-32315: Administration Console authentication bypass. Related to this issue, we have also made available updates to three of our plugins: Random Avatar plugin version 1.1.…