Reporting security issues

WooCommerceはセキュリティに深く配慮し、マーチャントとその顧客の安全を守るために努力しています。

You can find our security policy over here and, if you believe you have discovered a vulnerability, we encourage you to follow it and submit your findings via HackerOne-a trusted third party service that facilitates reporting of security issues. Please refer to the policy for more details, however some key points are as follows:

• We operate a bug bounty program, so you can be rewarded for valid reports, but not everything is in scope. Please check the guidance before posting.
• We strongly encourage responsible disclosure. To better protect everyone, please use HackerOne and do not post your findings in a public forum.

責任ある記者でいてくれてありがとう！