XSS Issue reported by PatchStack

Hi there,
I assume this has been reported by PatchStack to you always which is why the plugin is under investigation.

https://patchstack.com/database/wordpress/plugin/http-headers/vulnerability/wordpress-http-headers-plugin-1-19-2-authenticated-administrator-stored-cross-site-scripting-vulnerability

https://www.cve.org/CVERecord?id=CVE-2026-1379

It appears to be Admins or above who can take advantage of this vulnerability but it would be great to know if it’s being fixed, otherwise we need to look for an alternative plugin.