This is a really common problem, and the developer apparently won't fix it. You need to edit the file really-simple-captcha/really-simple-captcha.php and add
@chmod($file, (fileperms($file) & 044) | 0600);
immediately before the two unlink calls.