Potential security concern discovered in plugin

[urmomlovesme]

Hello,

I discovered an undocumented behavior in a plugin that I purchased through the site.

I sent a detailed message to the developer through the platform two weeks ago and followed up two days ago. No response.

I went to your support page and clicked help and the link appears dead. Tried in three five browsers on two computers and a mobile device, didn't work on any of them. Hmm, that's not helpful.

Your warranty page to file a claim for defective software comes back with a 404. Might wanna check that.

I am trying to be responsible and would prefer to provide details of what I found privately so a second set of eyes can evaluate what I found.

Please reach out to me.

Thank you.

[Death]

Could you provide the link that is returning a 404?

[urmomlovesme]

https://codefling.com/claims/

That is working now, but it appears chat is still not working.

Nobody has reached out regarding the security concern.

[Death]

7 hours ago, urmomlovesme said:

https://codefling.com/claims/

That is working now, but it appears chat is still not working.

Nobody has reached out regarding the security concern.

Go to that file's page, click support, create a support request and mark it private.

[urmomlovesme]

That says it goes to the author of the file.
As I said when I opened this thread, I contacted the author over two weeks
ago and followed up a few days ago. No response either time. Reaching out
to Codefling is what I'm doing *because* the author isn't responding — so
routing me back to them doesn't get anywhere.
I'm trying to handle this responsibly and would prefer to give the details
privately so someone can evaluate what I found before I decide what it
means. You're the only place to get this plugin as far as I know, so I'd
have thought you'd want to be that second set of eyes.
If there's no private channel on your side, tell me and I'll work out what
to do from there — but I'd rather do it with you than around you.
Either way, just let me know.

[urmomlovesme]

Following up on this, I have not received a response.