Only the latest release of linux-wallpaperengine-kde (engine) and WE Manager gets security fixes.

Please do not open a public issue. Use GitHub's private reporting instead: https://github.com/WallpaperEngineLover/linux-wallpaperengine-kde/security/advisories/new (for WE Manager: https://github.com/WallpaperEngineLover/we_manager/security/advisories/new).

Say which version you ran, what you did and what happened. Wallpapers are untrusted input, so a crafted wallpaper that crashes the engine, reads files outside its folder or runs a command is in scope. Reports are answered as soon as possible, fixes ship with the next release and the report is credited unless you prefer otherwise.