[wp-forums] Exploit report

[Petit]

Craig wrote:
> As this has happened before and will inevitably happen again, there 
> should
> be a set "policy" worked out so that a discussion doesn't have to 
> occur at
> every instance.
>
> FWIW, I suggest something like:
>
> - Break links
> - Add a strong reply to the effect that the issue is being studied by the
> appropriate people and that a response will be formulated and 
> communicated
> as soon as possible. Also state that all such claims should be 
> forwarded to
> the security email address.
> - Close the thread.
> - Any new threads that are related that appear after are linked to the
> original thread and closed.
>
> A consistent response to this every time will assist in giving people
> confidence that the issue is being given the appropriate attention.
>
> Craig.
I support this, although it's a good thing that these matters are 
brought to our attention on this list.
/Petit