If you find a security problem in a Box Of Rules plugin, site or service, please tell us privately first.

• Use the contact form at boxofrules.com/contact and start the message with "Security".
• Do not open a public issue for it.
• Tell us what you found, how to reproduce it, and what you think the impact is.

We reply within a few days, fix what needs fixing, and credit you if you want that. Plugins ship their fixes as a new release on boxofrules/plugins; sites deploy as soon as the fix is tested.