Security fixes are prepared for the current release candidate and the latest stable release after 1.0.0 becomes available. Older development versions are not maintained separately.

Please do not open a public issue for a suspected vulnerability. Use the repository's Security → Report a vulnerability form so the report and any proof of concept remain private while they are reviewed.

Include the affected WP Title Layer version, WordPress and PHP versions, required permissions, reproduction steps, and the expected impact. Reports that only require an already trusted administrator to alter their own site are still useful, but should clearly describe that trust boundary.