How to check a plugin for data breach

  • webdessie

    (@webdessie)


    8 years, 2 months ago

    How do I check if a plugin (the PHP-code) communicates with other servers/sites than the one the WordPress site is installed on?

    I would like to test if different plugins are data-safe to comply with the new European GDPR.

Viewing 3 replies - 1 through 3 (of 3 total)
  • Moderator Jan Dembowski

    (@jdembowski)

    Forum Moderator and Brute Squad

    8 years, 2 months ago

    Side note: I’ve moved this to Fixing WordPress as this doesn’t belong in Requests and Feedback.

    Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    🏳️‍🌈 Advisor and Activist

    8 years, 2 months ago

    Bad news? It’s not easy. Basically you download the plugin and read every line of code 🙁 It’s about as much fun as it sounds (and I do it for a living)

    Good news. WP’s working on helping that be a little easier

    You can read ALL the posts about it here: https://make.wordpress.org/core/tag/gdpr-compliance/

    We’ve got a lot of open tickets, but sadly there won’t be a one-sized fits all solution for everyone. After all, there are a great many plugins that legitimately call other servers (like a backup plugin, or a spam plugin) 🙁

    Thread Starter webdessie

    (@webdessie)

    8 years, 2 months ago

    It would be great if WordPress.org had a GDPR Compliant “stamp” for each plugin that the developer could point in “YES” / “NO” and then provide what data is collected and where they are sent.

    I guess that plugin developers who inform ind the Details about the plugin will have much more success among european users.

    Anyway, what should I look for in the code to see if it calls another plugin, uses userdata or communicates data somewhere?

Viewing 3 replies - 1 through 3 (of 3 total)

The topic ‘How to check a plugin for data breach’ is closed to new replies.