Security bug CVE 2022-47150

Hi there,

Is there any timescale on a bug fix for the cross-site request forgery bug identified as CVE 2022-47150? This is listed by most security scanners as existing in all versions of your plugin up to and including the current (1.9.2) release, with a recommendation to deactivate and uninstall until a fix is available.

Unfortunately, I can’t find any further info about the precise details of the issue since the CVE record is still currently in the Reserved state (so, presumably, you are aware of it but the details aren’t yet public).

If you have an update on the current status of this, that would be great.