Report suspected vulnerabilities privately through GitHub private vulnerability reporting. Include the QuickNav, WordPress, PHP and WPCodeBox versions, reproduction steps and impact. Mention Library or Updater versions when relevant.
Do not include credentials, private snippet contents or exploitable details in public issues or discussions. Ordinary bugs and questions belong in Issues or Discussions.
Security fixes are assessed and coordinated privately before public disclosure. No guaranteed response period is promised.