Plugin Vulnerability

Hi @roxidesi

Thank you for reaching out and bringing this to our attention. Wordfence is currently flagging the feature related to exporting and importing user lists. While we work on a long-term solution to ensure seamless export of subscription data, we have implemented measures in our most recent versions to enhance security. These include requiring verification codes for both imports and exports, as well as encrypting downloaded and uploaded data.

Additionally, you can mitigate this issue by restricting plugin access to administrators only for subscription exports. If this feature is available to backend users, limiting access should help prevent further complications.

We sincerely appreciate your understanding and patience as we actively work towards a comprehensive resolution.

If you have any further questions or need additional assistance, please don’t hesitate to let us know.

Best regards,