Critical Issue reported by Wordfence

Podlove Web Player
1

Good day,

the security plugin Wordfence reports a security thread which I want to pass on to you:

https://www.wordfence.com/threat-intel/vulnerabilities/wordpress-plugins/podlove-web-player/podlove-web-player-591-missing-authorization

Does this make any sense to you or is that irrelevant?

Best wishes Thomas

2

Hello, Martin here from the Podlove team. @ericteubert is aware of this report. It’s not critical, since this API endpoint is open on purpose. We’re in the process to get this report deleted, but it takes some time communicating with Patchstack.