Is your own website hacked? That isn't a vulnerability in Moatline. Start with our guide to removing malware from WordPress, or email us for help.
How to report
Email support@moatline.io with the subject “Security report”. Please include:
- Which product and version: the free plugin, Moatline Pro, or this website.
- What the issue is and what an attacker could do with it.
- Steps to reproduce it, or a proof of concept.
- How you'd like to be credited, if at all.
Please don't report security issues in public forum threads or reviews until we've released a fix.
What happens next
- We aim to confirm we've received your report within 3 working days.
- We'll keep you updated while we investigate and tell you when a fix is released.
- Fixes go out as a normal plugin update and are listed in the changelog. With your permission, we'll credit you there.
In scope
- The Moatline Malware Scanner plugin on WordPress.org.
- The Moatline Pro add-on.
- The moatline.io website.
Out of scope: reports from automated scanners with no demonstrated impact, missing security headers that have no practical effect, denial-of-service testing, social engineering, and issues in WordPress core or in other plugins (please report those to their own developers).
Good-faith research
If you follow this page, act in good faith, only test against sites you own or have permission to test, and don't access or change other people's data, we won't take legal action against you for your research.
This policy is also published in machine-readable form at /.well-known/security.txt.