In reply to David Anderson.

I have received vulnerability reports from WordFence and Patchstack about my plugins in the past that explicitly require an administrator role to exploit, and it irks me. How are these vulnerabilities?

I think they are creating these reports just to sell their product.