Hi! WoodMart 8.6.7 bundles Core 1.1.9 with a different inc/class-auth.php from our installed Core 1.1.9. Is this an intended same-version security revision, and should existing installations replace Core using the bundled package? Why does the declared version/update check not distinguish it?