Security fixes are released for the latest minor version on npm. Please upgrade before reporting.
Please do not open a public issue. Email nairda@wirelab.pl with:
- the plugin version and NodeBB version,
- steps to reproduce or a proof of concept,
- the impact you expect.
You should get a reply within 7 days. Once a fix is released, the CHANGELOG lists it under Security, and you are credited unless you prefer otherwise.