Skip to content

Security: aegiswp/plugin

Security

.github/SECURITY.md

Security Policy

Supported Versions

Version Supported Security Updates
1.0.x ✅ ✅
dev ✅ ✅
main ✅ ✅

Reporting a Vulnerability

Please do not open a public GitHub issue for security vulnerabilities.

  1. GitHub Security Advisory (recommended): Report a vulnerability
  2. Email: mail@atmostfear-entertainment.com
  3. PGP Key: https://www.atmostfear-entertainment.com/aegis/security/pgp
  4. Include: description, reproduction steps or PoC, impact, WordPress / PHP / plugin versions

Response Timeline

  • Initial Response: Within 48 hours
  • Detailed Assessment: Within 5 business days
  • Patch Release: Within 14 days for critical vulnerabilities
  • Public Disclosure: After a patch is available (typically 7–14 days later)

Scope

  • Free Aegis plugin PHP, blocks (Map, Modal), admin dashboard, integrations, and shipped assets

Out of Scope

Third-party plugins, custom site code, modified plugin files, and the separate theme / Pro repositories (report those upstream).

For non-security bugs, use the Bug Report template.

There aren't any published security advisories