Who do I report a Zero Day to?

Hi, I’ve just removed what appears to be an unreported zero day hack from one of my websites that involves a common plugin authored by WordPress.

If somebody from WordPress would like to reach out I’ll share the files and forensics so you can patch it.

J