In reply to Devin Walker.

Hey Devin,

When we find an item with a serious security vulnerability, we disable it straight away (as we did with hundreds of themes in the Rev Slider case). For less severe vulnerabilities, we generally ask the author to fix it and give them a window, after which we will disable their item if not fixed.

This one is a little different, in that it's wide ranging and also the presence of the 2 functions doesn't necessarily mean that the item is vulnerable. It needs to be checked by the author and updated if necessary, but we can't automatically assume there is a problem - so we won't be disabling items at this point (any more than the .org team are disabling plugins there).

We will be emailing all authors with items that contain one or both of the functions (whether in their code or TGM PA or other) and asking them to check their code and update asap. We've already posted on the forums and we'll be linking to that from the author dashboard - so at least we think we'll reach most authors.