Security fixes are applied to the current major release. Users should run the latest available Cybermaps release and a supported WordPress and PHP version.

Please do not disclose a suspected vulnerability in a public issue, discussion, pull request, or social post.

Use GitHub's private vulnerability reporting for this repository. If that feature is unavailable, contact the maintainer privately through CYBER BRAND and include:

• the affected Cybermaps version;
• WordPress and PHP versions;
• the vulnerability type and affected route or action;
• clear reproduction steps or a minimal proof of concept;
• the impact you observed; and
• any suggested remediation or disclosure constraints.

You should receive an acknowledgement within five business days. Validation, fix, release, and disclosure timing depends on severity and reproducibility. Please allow a reasonable remediation period before public disclosure.

Good-faith research that avoids privacy violations, service disruption, data destruction, and unauthorized persistence is appreciated.