Security vulnerability in Curcy Premium 2.4.0 – Jetpack flagging SQL Injection

I purchased Curcy Premium 2.4.0 two days ago via CodeCanyon.

Jetpack Protect is flagging a critical security vulnerability in this version:
– CVSS Score: 9.3
– Type: SQL Injection
– Status: Highly dangerous, expected to become mass exploited

This is affecting my live WooCommerce store at essencesamazigh.com

Please advise:
1. Is a patched version available?
2. When will a fix be released?
3. Is there any immediate mitigation I can apply?

Thank you