Security fixes are applied to the latest version on the master branch.
| Version | Supported |
|---|---|
latest on master |
yes |
| older deployments | no |
If you discover a security issue — especially related to file uploads, API abuse, or export handling — please do not open a public GitHub issue.
Instead:
- Contact the maintainer via GitHub profile or the project owner on X (@dev_fabs)
- Include a clear description and steps to reproduce
- Allow reasonable time for a fix before public disclosure
In scope:
/api/upload-pofile upload handling/api/exportrequest validation- Server-side parsing (PO/MO, ZIP)
- Client-side storage of uploaded translation data
Out of scope:
- Vulnerabilities in third-party WordPress.org infrastructure
- Issues in self-hosted deployments caused by misconfiguration outside this repository
Thank you for helping keep the community safe.