[wp-forums] Exploit report

[Craig]

As this has happened before and will inevitably happen again, there should
be a set "policy" worked out so that a discussion doesn't have to occur at
every instance.

FWIW, I suggest something like:

- Break links
- Add a strong reply to the effect that the issue is being studied by the
appropriate people and that a response will be formulated and communicated
as soon as possible. Also state that all such claims should be forwarded to
the security email address.
- Close the thread.
- Any new threads that are related that appear after are linked to the
original thread and closed.

A consistent response to this every time will assist in giving people
confidence that the issue is being given the appropriate attention.

Craig.