We take the security of Ersaal SMS Gateway very seriously. If you discover a security vulnerability, please report it responsibly.

Please do not report security vulnerabilities through public GitHub issues.

Instead, please report security vulnerabilities privately via email to:

• Email: wd@lamah.com
• Subject: [Security Vulnerability] Ersaal WordPress Plugin

Please include the following details in your report:

• Type of vulnerability (e.g. CSRF, XSS, SQL injection, Authentication bypass).
• Step-by-step instructions or Proof of Concept (PoC) to reproduce the issue.
• Affected components or versions.
• Any potential mitigation or remediation suggestions.

• We will acknowledge receipt of your vulnerability report within 48 hours.
• We will provide a status update and estimated resolution timeframe within 5 business days.
• Once the vulnerability is resolved, a patch release will be published promptly, and you will be credited if desired.