Vulnerability

@pexlechris yes, it was patched in v2.6.3: https://wordpress.org/plugins/variable-inspector/#developers (changelog)

However, I think I did not remember to submit the patch via Pathstack’s official report page, so, it sort of fell into a limbo zone, and Wordfence ended up marking it as unpatched. I’m in touch with Pathstack on how to best resolve this at this point. Will report back when and if I hear back and/or has managed to resolve the issue with Pathstack.