Wordfence flagging as security risk

Wordfence has flagged this excellent plugin as a security risk:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/download-attachments/download-attachments-140-unauthenticated-insecure-direct-object-reference

https://patchstack.com/database/Wordpress/Plugin/download-attachments/vulnerability/wordpress-download-attachments-plugin-1-4-0-insecure-direct-object-references-idor-vulnerability?_s_id=cve

Is this the same issue as before when using numeric references to files, or a different one?

Any update would be very much appreciated.

Thanks