Vulnerability in 3.7.0

Hi,

I came across this site just now and it describes an issue and as far as i can see there is no update out yet? Do you have any time plan for when a fix can be issued? They recommend that you delete and disable the plugin for now.

“Unauthenticated SQL Injection (SQLi) vulnerability discovered by cydave in WordPress BadgeOS plugin (versions <= 3.7.0).”

https://patchstack.com/database/vulnerability/badgeos/wordpress-badgeos-plugin-3-7-0-unauthenticated-sql-injection-sqli-vulnerability

Best regards,
Emil