Security

SECURITY.md

Security Policy

Supported Versions

Only the latest released version is supported with security updates.

Reporting a Vulnerability

Please report security issues privately.

Email: hello@rocketdeploy.dev
Subject: [SECURITY] WooCommerce Order Status Manager

Include:

affected version
description and impact
reproduction steps / PoC (if available)
any suggested fix

We will respond as soon as possible, confirm the issue, and coordinate a responsible disclosure timeline.

Scope & expectations

This plugin:

operates in the WordPress admin context
uses capability checks and nonce validation for state changes
sanitizes input and escapes output

If you believe any of these guarantees can be bypassed, please report it privately.

There aren’t any published security advisories