• Check our security.txt file for details on how to contact us
• Contact us before publicly disclosing the issue anywhere else

This plugin is developed as OpenSource under the MIT licence. There is no money earned from it. Therefore we are not able to provide any bug-bounties whatsoever. You will be mentioned in the release notes of a fix-release though.