Hello,
We got a reply from the Envato team https://prnt.sc/1u246er
Vulnerability is related to WooCommerce Dynamic Pricing & Discounts plugin, not to the theme code itself. So, update the mentioned plugin to the latest version if you installed that.
Theme code does not have any security holes.
Regards