Codeermeneer Companion Auto Update vulnerabilities

• codeermeneer companion auto update The companion-auto-update plugin before 3.2.1 for WordPress has CSRF. CVE-2018-20972 8.8 HighAugust 16, 2019
• codeermeneer companion auto update The companion-auto-update plugin before 3.2.1 for WordPress has local file inclusion. CVE-2018-20973 9.8 CriticalAugust 16, 2019