Vulnerability

Hi there! 👋

Thanks for flagging this! 🙏 We released the security patch in version 2.3.26 on 31 Oct 2026. We’re not sure why Wordfence is showing 2.3.36 as the patched version 🤔. We’ll check with the Wordfence team and get it corrected.

In the meantime, if you’re on 2.3.26, you’re all good and protected 🔒✨

Here’s what the update fixed:

• Security: Added manage_options capability checks to the settings backup export, import, and reset AJAX actions. Backup export, import, and reset are now limited to the plugin’s own settings option key.

Let us know if you have any other questions! 😊