Do not report a security issue in a public issue. Write to https://kioskthemes.com/support/ or use GitHub private vulnerability reporting (Security tab).