If you have a WordPress.com account, please Login

Public: Other users will be able to view this question and its answer (so everyone can learn from it!). Answers will be provided by WordPress.com staff.

We take security very seriously at WordPress.com and greatly appreciate receiving private notification from security researchers before full disclosure to the public. If you believe you have found a security issue, please submit your findings.