CVE-2023-37888

Patchstack says that there is a “Local File Inclusion vulnerability” in this plugin. However, they also write that there is no answer from the developer. Link to the advisory: https://patchstack.com/database/vulnerability/auxin-elements/wordpress-phlox-core-elements-plugin-2-14-0-unauthenticated-local-file-inclusion-vulnerability

Is this plugin still being developed? Can you provide details and/or a fix for the vulnerability?