Skip to content

SECURITY.md

Latest commit

 

History

History
25 lines (15 loc) · 1.27 KB

SECURITY.md

File metadata and controls

25 lines (15 loc) · 1.27 KB
Raw

Security Policy

Supported versions

Security fixes are released for the latest version of WP User Manager only. If you're reporting an issue, please check that it reproduces on the current release.

Reporting a vulnerability

Please don't report security issues in public GitHub issues or on the WordPress.org support forum.

Report them through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify us.

If Patchstack declines your report, or you'd rather contact us directly, email support@wpusermanager.com with "Security" in the subject. Messages sent there are private to our team.

Please include:

  • the version you reproduced it on, and any addons that were active
  • the affected file, function or endpoint
  • the prerequisites: the user role needed, and any non-default settings or plugins
  • steps to reproduce, and a proof of concept if you have one
  • the impact you believe it has

What happens next

We'll confirm we've received your report, reproduce it, and keep you updated while we work on a fix. Once the fix is released we'll credit you in the changelog, unless you'd rather not be named.