Security fixes are released for the latest version of PublishPress Cart. Please update to the latest release before reporting an issue.

Please do not report security vulnerabilities through public GitHub issues, pull requests, or discussions.

Report them privately through GitHub instead:

1. Open the Security tab of this repository.
2. Click Report a vulnerability.
3. Describe the issue, the affected version, and the steps to reproduce it.

We will acknowledge your report, investigate it, and keep you updated in the private advisory until a fix is released. Once the fix is available, we publish the advisory and credit you unless you prefer to stay anonymous.