WP User Profile Avatar <= 1.0.6 – Missing Authorization

Hello Support,

I got a message from Wordfence the wp-user-profile-avatar plugin has a potential security problem:

The WP User Profile Avatar plugin for WordPress is vulnerable to
unauthorized access due to a missing capability check on a function in
all versions up to, and including, 1.0.6. This makes it possible for
authenticated attackers, with Subscriber-level access and above, to
perform an unauthorized action.

CVSS 4.3 (Medium)

Source: https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/wp-user-profile-avatar/wp-user-profile-avatar-106-missing-authorization

Will there be an update coming to overcome this security problem?

The page I need help with: [log in to see the link]