Security

What to send

Where the problem is (a page, an API endpoint or a plugin version), what you did and what happened. Steps to reproduce, screenshots or a short video help us fix it faster.

Test with your own Seyaq account and your own store.

While you test

Don't open, change or delete data that isn't yours, and stop as soon as you see someone else's. Don't slow down or disrupt the service — no load, spam or denial-of-service tests — and no social engineering or physical attacks. Keep the problem private until we've fixed it.

What we do

We confirm we have your report, keep you posted while we fix it, and tell you when the fix is live. Our team works Sunday to Thursday, 9:00 to 18:00 Gulf time (GMT+4).

Plugin updates

Fixes for the Seyaq plugins ship as signed updates. The latest release receives fixes; older versions are asked to update before they keep working with Seyaq.

Not covered

Scanner output without a working example, best-practice headers that change nothing, and problems in a store's own WordPress, theme or other plugins.