Contest Gallery WordPress plugin

Security & Responsible Disclosure

Contest Gallery participates in Patchstack’s Vulnerability Disclosure Program. We review security reports received through Patchstack, Wordfence and WPScan, as well as reports from independent security researchers. Confirmed vulnerabilities are addressed through plugin updates.

Reporting a vulnerability

Please submit potential security vulnerabilities through our official Patchstack reporting form. Include the affected Contest Gallery version, whether you use FREE or PRO, and clear steps to reproduce the issue. Relevant settings and supporting evidence can help us understand the report.

Please do not post sensitive security details in public support topics. For installation questions or general troubleshooting, contact support.

How we handle reports

We review reported issues and investigate whether they affect Contest Gallery. When a vulnerability is confirmed, we work on a correction and make security fixes available through plugin updates.

We communicate with the reporting researcher or platform as part of the disclosure process. Keep your plugin installation up to date to receive published fixes.

Security reporting channels

Patchstack

Contest Gallery has an active official Vulnerability Disclosure Program on Patchstack. Read our vulnerability disclosure policy for the reporting process and program details.

Wordfence

We review security reports received through Wordfence. Published advisories and affected or fixed versions can be found in the Wordfence listing for Contest Gallery.

WPScan

We also review reports received through WPScan. Its Contest Gallery listing provides published vulnerability records and information about fixed versions.

Independent researchers

We welcome responsible reports from independent security researchers. Please use the Patchstack form to submit details privately.