Reset Password vulnerability

Hi,

Pods, together with a number of other plugins, suffers from a serious flaw, that allows for hostile password reset request from within the account. I’m sure you’re aware of this. The flaw was published on the august 15, here:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/pods/pods-339-unauthenticated-privilege-escalation-via-authorization-bypass-to-admin-methods-via-pods-admin-ajax-router

Your latest update is from august 14, and from the changelog it is not apparent to me if the vulnerability has been patched or not. Could you tell if it has, and if not, if and when you’re planning to do so?

Cheers!