Compromised WordPress Plugins Detected

Hi. I received an email titled “Compromised WordPress Plugins” from [email protected] that mentioned the following two plugins:

Restrict User Access – Ultimate Membership & Content Protection
Anti-Malware Security and Brute-Force Firewall

However, I do not even have the 2nd plugin installed on my site.

According to the email, “Details about each vulnerability could be found under WordPress Console -> Settings -> Security by CleanTalk -> Critical Updates.”
But on the Critical Updates page, there is “No active vulnerabilities found at the current state.” and “No vulnerabilities found”.
Nothing is found in the malware scanner as well.

Is there an error with the email?

Thanks.