security vulnerability found via WPEngine

The Plugin “WordPress Simple HTML Sitemap” has a security vulnerability.

Note from host:

“Hello,

At WP Engine we take the security of your sites very seriously, and make every effort to keep our customers aware of any potential security risks. We are reaching out to you today because we identified resources that may be utilizing a vulnerable version of the wp-simple-html-sitemap plugin.

WP Engine summary of the vulnerability: The software does not perform an authorization check when an actor attempts to access a resource or perform an action.”