Help

Security reporting

English · Deutsch

Report suspected vulnerabilities through private vulnerability reporting. Do not use a public issue or comment for sensitive findings. Ordinary bugs and questions belong in Issues or Discussions.

Include the plugin, WordPress and PHP versions, whether Multisite is used, the affected operation, and the smallest reproducible set of steps. Use a local test installation where possible. Remove credentials, personal data, private content and server paths from screenshots and logs. Do not send a complete database backup.

If an issue may expose public statistics, disable the relevant public-output permission while it is investigated. This limits that output only; it is not a general security remedy. No response-time or remediation-time guarantee is stated here.

Ordinary bugs and questions · Discussions