Security and Vulnerability Reporting

We want to keep Easy Blog Networks safe for all users. Publicly disclosing a vulnerability can put our entire community at risk. If you've discovered a vulnerability in the system, we appreciate your help in disclosing it to us in a responsible manner.

Most security issues we receive are fixed and resolved within 24 hours. For more information read our policy.

Independent Third-Party Audits

We also put the platform through regular third-party audits to check for vulnerabilities in the system.

Vulnerability Reports

All current vulnerability reports and official audits, ordered by date of disclosure.

Month	Reporter	Report Type	Notes
November 2020	EBN User	User Feedback	WP user misconfiguration.
October 2020	Yashar Ghaffarloo	Independent Audit	Server configuration vulnerability.
May 2020	Yashar Ghaffarloo	Independent Audit	Minor vulnerabilities in app.
November 2017	Yashar Ghaffarloo	Independent Audit	Several non-disclosable vulnerabilities reported.
May 2016	Yashar Ghaffarloo	Independent Audit	Several non-disclosable vulnerabilities reported.
November 2015	Charles Floate	Consulting	Feedback for system.
August 2015	Jason Duke	Independent Audit	Minor vulnerabilities in app.
August 2015	Domen Kožar	Independent Audit	Minor vulnerabilities in app.
April 2015	Koutrouss Naddara	Independent Audit	Found vulnerability in SMTP setup.
March 2015	Balaji	Independent Audit	Found vulnerability on homepage.
January 2015	Andy Fletcher	Independent Audit	Found vulnerability in core plugin.
January 2015	Jason Duke	Independent Audit	Found 4 vulnerabilities in app.

Contact Us

If you found a vulnerability in the system, please contact us and provide as much information as possible following our For more information read our disclousure policy