Problem: The client received multiple WordFence alerts indicating a potential vulnerability in the "WPML Sticky Links" and "CMS Navigation" plugins, labeling them as "Abandoned" due to not being updated for over three years and no longer being available on wordpress.org. Solution: We have confirmed that both WPML Sticky Links and CMS Navigation are still actively maintained by our team. These plugins are tested regularly against new WordPress and WPML releases. The reason they are flagged as "abandoned" by Wordfence is that they are no longer distributed via wordpress.org, not because of any security issues. They are updated internally as needed. If you are not actively using these plugins, you may choose to remove them. However, they are safe to keep installed and do not pose a known security risk.
If this solution does not resolve your issue or seems outdated, we recommend checking related known issues at https://wpml.org/known-issues/, verifying the version of the permanent fix, and confirming that you have installed the latest versions of themes and plugins. If further assistance is needed, please open a new support ticket at WPML support forum.
