wordfence flags file change

A client of mine showed me his site using Wordfence. It flags file “inc/Model/Ajax.php” as having lowered priveleges from “admin” to “normal user” (edit_posts) for the save_passsword function.

Was this a change you guys made? The problem is that the change is detected between plugin files where the plugin version has not changed.