OH – Was that you!!!
That message looked WELL dodgy – looked as though somebody wanted me to send them the details so they could publish it and use it themselves for hacking. Hence It got deleted.
Still looks dodgy, so does your reply here.
Are you legit then?
Well, I spent several hours working out what the hackers did and then even more time compiling a decent report that I sent to security@wordpress.org but I’ve heard nothing since.
No thanks, no confirmation, no nothing.
I’m beginning to think I wasted my time if I’m not being taken seriously. in fact, if the security team do not take my report seriously what chance is there of having secure WordPress software?
