The Koko Analytics team and community take potential security issues in our software seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
To report a security issue, please use the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist with verification, CVE assignment, and notifying the developers of this plugin.
You can also email us at support@kokoanalytics.com or use the GitHub Security Advisory "Report a Vulnerability" tab.