We take security bugs very seriously. We appreciate your efforts to responsibly disclose your findings, and will make every effort to acknowledge your contributions.
Please go to the Contact page to report any BuddyPress Groups Extras plugin security issues.