I see. So I need a detailed report.
Problem is that I’m not the one that discovered the issue.
In the video on that page they did. But I suppose they are not interested in including their solution in main software, because that’s their business.
Could a WordPress admin contact them and maybe start a crowdfunding campaign to include their solution?
It doesn’t seem correct that main software has the flaws they are reporting. And their solution seems very promising. Because no matter if you have unsafe plugins injection us not possible.
