Vulnerability: Broken access control

My WP Remote monitor has flagged this on 4 of my client sites. Doesn’t look like developer has responded to any support issues in a year and it’s only tested up to WP Core 6.7.5.

FWIW, in a previous support thread, someone had an issue and another responder suggested Safe SVG.