Security threat to my website

This seems like a robust app… if you pay. Once I got it set up, it became obvious that *all* the desirable features were premium features. Obviously deciding where to draw the line between free and premium is an art, but SumoMe is definitely on the ‘you must be joking’ side of that line.

Even so, I was still willing to give it a try, maybe even consider upgrading if it was reliable and increased conversions. I never got the chance, because SumoMe immediately became a security threat to my website.

I set the badge to ‘hidden’ in settings. However, when I would log out and revisit the page (even in another browser or on a totally different computer), the badge would still load and appear every time the site loads, despite being set to ‘hidden’. What’s worse is that you could click on it and actually open my SumoMe apps/settings and manipulate them, without being logged in. Ridiculous.