Only the latest release receives security fixes.

Please do not open a public issue for security problems.

Report it privately through GitHub instead: go to the Security tab of this repository and click Report a vulnerability.

Include, if possible:

• The module/plugin and WordPress versions affected.
• Steps to reproduce, or a proof of concept.
• The impact you expect (e.g. XSS, SQL injection, privilege escalation).

You should get a first answer within a few days. Once the issue is confirmed, a fixed release will be published and you will be credited in the advisory unless you prefer otherwise.