We take the security of Bulk Attributes for WooCommerce® and of our customers’ stores seriously.
Reporting a vulnerability
Please report security issues privately by e-mail to info@woocommercebulkattributes.com, with “Security” in the subject.
Include, if you can:
- the plugin version, and your WordPress, WooCommerce and PHP versions;
- a description of the issue and its impact;
- steps to reproduce, or a proof of concept.
Please do not disclose the issue publicly until a fix is available.
What happens next
| Step | Target time |
|---|---|
| Acknowledgement of your report | within 72 hours |
| Coordinated disclosure | public disclosure within 90 days of the report, or earlier once a fix is released |
| Actively exploited vulnerability | competent authorities notified within 24 hours, as required by the EU Cyber Resilience Act |
We will keep you informed and, if you wish, credit you in the changelog.
Supported versions
| Version | Security fixes |
|---|---|
| 3.1.1 and later | Yes |
| 3.1.0 and older | No — please update to 3.1.1 |
Security updates
Security releases are announced on the product page, in the changelog, and by e-mail to customers. Latest: 3.1.1 (critical security update) — changelog.