Hello, thank you for your fantastic plugin with +90k active installations! Wordfence started complaining about your plug-in not being maintained. Maybe at least updating the “Tested up-to version” would be sufficient… Thanks!
I’d rather see this fixed as well, however, this security issue can be only “used” by authenticated users. So the attack would need to come from the inside. And the things an attacker could do are pretty limited. So if you trust your colleagues and your site does not allow anyone to register, the risk is significantly lower.
