Report a Vulnerability
Found a security issue in Easy MCP AI? Please report it responsibly. We partner with Patchstack for coordinated vulnerability disclosure.
We aim to acknowledge reports within 48 hours and provide a fix timeline within 7 days. Please do not disclose vulnerabilities publicly before we have had a chance to address them.
Eligible reports may qualify for a bounty reward
Valid vulnerabilities submitted through Patchstack may be eligible for monetary rewards under the Patchstack Zero Day program.
View bounty guidelines & rewards →Submit your report through our Patchstack Vulnerability Disclosure Program (VDP). Patchstack coordinates responsible disclosure for WordPress plugins and gives researchers a structured channel to submit and track reports.
Open the Patchstack VDP form →Please do not report security vulnerabilities through public GitHub issues, the WordPress.org support forum, or social media.