Plugin Vulnerability?

Malcare & Patchstack are reporting that the latest version of this plugin includes a plugin vulnerability.

https://patchstack.com/database/vulnerability/custom-field-template/wordpress-custom-field-template-plugin-2-5-8-cross-site-request-forgery-csrf-vulnerability

Is an update pending?

Thank you!