Please do not report security issues in public GitHub issues.

Report them privately through Security > Report a vulnerability on the affected repository, or by email to info@devdiggers.com. Include the plugin, version, steps to reproduce and the impact.

We confirm receipt within 3 business days, keep you updated while we fix it, and credit you in the changelog if you want. Only the latest released version of each plugin receives security fixes.