These releases of Zen Cart are actively supported for bugs and security issues.

If you discover a security vulnerability, please email security @ zen-cart.com with your proof-of-concept including all the necessary steps to recreate the problem.

There is not currently any bug-bounty program; however, we will acknowledge/credit confirmed issues reported via responsible-disclosure.