Please report suspected vulnerabilities privately to [email protected]. Include the affected plugin, version, and steps to reproduce. Do not include API tokens or customer source code in a report.

We will acknowledge reports and coordinate a fix and disclosure with the reporter.