Critical Vulnerability | WordPress.org

See this reply from TablePress author

also from WordFence:

FYI – This is just reporting a plugin that has an existing cve. We didn’t do the research or create the cve (that I’m aware of). We’re just making our users aware of it. If I understood what the plugin author said, they have known about it since 2019 so it’s not like this was a secret.

there are also some threads on WordFence forum related to irrelevant warnings,
such as:

Hi,

thanks for your post, and sorry for the trouble.

Indeed, the link above contains the current status on this.
Yui, thanks for also adding that extra information and link — I wasn’t aware of that yet.

Best wishes,
Tobias