Morning. Looks like there’s an issue with the Subscribe to Comments Reloaded plugin.

In the last week or two I kept getting ‘thanks for your message’ auto-emails to an email address I don’t actively use it. I checked my gmail Sent box and nothing – my thought was that someone must be spoofing that address.

Then last night, one came in with the original email still attached and it was a STCR ‘thanks for subscribing’ email!

So I looked in my STCR subscriptions are there were hundreds per day – mainly vaping email addresses, but also loads of business ones, obviously used by spammers.

So, I went in to STCR and noticed it had an update so I ran that. Looked at the dev notes and there was something about adding better CAPTCHA food “subscribe without commenting”.

I ran the update, then looked for a toggle to turn off “subscribe without commenting” but there isn’t one! I was able to remove the link by deleting it from the text that appears under the comment box. I flushed the whole cache and went to bed.

This morning there were dozens of new spam subscriptions in STCR – more, in fact, than there were even spam comments, so how are they getting through?

For the moment, I’ve deactivated STCR.

• This topic was modified 1 month, 1 week ago by emilyel.