How does ont report vulnerabilities in plugins

  • Unknown's avatar
    adminrmdesigns · Member ·

    I get the weekly US-CERT vulnerabilities report and there are several plugins listed as High Vulnerability and other levels of vulnerability.

    I reported them to wordpress.org but they say they are hosted here on wordpress.com

    How do I report this?

    The US-CERT report is at https://www.us-cert.gov/ncas/bulletins/SB19-084

    Search for WordPress and you can skip through them all.

  • kokkieh · Staff ·

    Hi there,

    Plugins in the official plugin directory on WordPress.org are handled by the plugins team at https://make.wordpress.org/plugins/

    However, no one oversees plugins not listed there, as those are made by independent developers who choose to not submit their plugins for official review. The only people who can act with regards to plugins like those, are the plugin developers themselves.

    This forum is for technical support for sites hosted on WordPress.com. We are not able to help you with this here.

  • The topic ‘How does ont report vulnerabilities in plugins’ is closed to new replies.