The following versions of this project are currently being supported with security updates.

If you believe you have found a security vulnerability, please do not create a public issue or post it publicly anywhere else. You can responsibly disclose the problem directly via email to security at goodwp.io

We will review the vulnerability report and determine the best course of action within 48 hours. Some additional that can be of help to us:

• Your name and affiliation (if any).
• A description of the technical details of the vulnerability. It is very important to let us know how we can reproduce your findings.
• An explanation who can exploit this vulnerability, and what they gain when doing so -- write an attack scenario. This will help us evaluate your report quickly, especially if the issue is complex.
• Whether this vulnerability is public or known to third parties. If it is, please provide details.

If you believe that an existing (public) issue is security-related, please send an email to security at goodwp.io. The email should include the issue ID and a short description of why it should be handled according to this security policy.

Once an issue is reported, we uses the following disclosure process:

• Wherever possible, fixes are prepared for the latest supported versions.
• Patch releases are published for all fixed released versions and the advisory is published.
• Release notes and our CHANGELOG.md will include a Security section with a link to the advisory.

Past security advisories, if any, are listed below.