Security issue to fix

Hi there,
I just got notified about a potential security issue. Look here:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/easy-sticky-sidebar/wordpress-cta-156-missing-authorization-via-multiple-ajax-actions

“A broken access control issue refers to a missing authorization, authentication or nonce token check in a function that could lead to an unprivileged user to executing a certain higher privileged action. This vulnerability has not been known to be fixed yet.”

This was publicized in November – so I was surprised that it went unfixed for over 5 months now. Can you comment on this, please – is it a valid report? Or, even better, could you fix this security issue?

Regards

Ulrich