Wordpress App accessing gated content

Wordpress Plugin
1

One of my readers showed me a little trick.
He got the WordPress App on his phone, looked up my website, and showed me that he could access my gated content.

Images will be included with this.
I looked up my site:

Screenshot_20220101-163019
Screenshot_20220101-1630191080×2400 75 KB

It fetched posts and displayed a list of things it shouldn’t be

Screenshot_20220101-163412
Screenshot_20220101-1634121080×2400 179 KB

I clicked on the first one, a gated post:

Screenshot_20220101-161905
Screenshot_20220101-1619051080×2399 256 KB

It shouldn’t display it.
Here’s what it looks like on a browser instance.

Screenshot_20220101-161923
Screenshot_20220101-1619231080×2400 145 KB

I don’t know what this is, but I would say it is in need of your attention right now. If WordPress app users can simply bypass your plugin, then there’s an issue here.

I will add in that gated content after Nov. 27th seem to be displaying the correct content:

Screenshot_20220101-164715
Screenshot_20220101-1647151080×2400 167 KB

2

The plugin tries to gate content that are in RSS feeds. But if your site is made to display entire content, that could create problems like this. Also if the remote service has any caching feature or similar feature, it may keep posts which it may have indexed.

If the old posts are showing but the new ones are working properly, investigating what has changed in between those dates may provide clues. (ie, plugin changes at your site etc)