The Plugin "Mega Main Menu" has a security vulnerability

Envato Customers Purchases and Subscriptions
#1

The Plugin “Mega Main Menu” has a security vulnerability buy they are not responsive nor is Leadinjection the template creator what’s a mother to do? Evato sold it.

#2

Any help on this?