Media served from another host — an offload plugin, or a CDN pointed at the uploads directory — is now named on the status tab and in Site Health as what it is: files this plugin is never asked about. This was the one failure that looked like success.
- The rules are in place, the live test requests a file from this site and passes, the audit calls the library protected — while the files themselves are handed out by somewhere else entirely.
- Judged from the media URLs alone: no HTTP request, no scan, and no list of plugin names to go out of date.
- The wording states the fact rather than a verdict: these URLs do not pass through Medifence. The fix belongs where the files are served from, not in the rules.
- The new
medifence_external_mediafilter corrects the verdict for a setup where the files do pass through this site after all.
📦 Download Medifence 1.54.0 (zip)
