Honestly, I'd contact them via email if this is such an important vulnerability. It will leave you with some evidence you did indeed contact them and that your intentions were not mailicious.

Not sure what the screenshot is meant to be