Vulnerability – Authorization Bypass Through User-Controlled Key

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/shiprocket/shiprocket-208-authenticated-subscriber-insecure-direct-object-reference

Considering how horrible Shiprocket support in general is, can we even expect a patch anytime soon?