Support » Plugin: Yoast SEO » Is WordPress SEO spying on us all?

  • Phill Brown

    (@phill_brown)


    Having conducted tests on several websites and server environments, it looks like WordPress SEO is tracking private data regardless of whether we want it to or not.

    The allow tracking field in General Setting controls whether we want to send data to Yoast, and by default this is unchecked. Instead it appears that the yoast_tracking action is being scheduled every time the plugin loaded.

    This is giving Yoast access to:

    • Site URLs and names regardless of privacy settings
    • Post and comment counts
    • Custom post types
    • Plugin installations
    • Theme installations

    To fix, open up <plugins>/wordpress-seo/wp-seo.php and replace lines 101-103 with:

    if ( isset( $options['yoast_tracking'] ) && $options['yoast_tracking'] == 'yes' ) {
        require WPSEO_PATH.'admin/class-tracking.php';
    } else {
        wp_clear_scheduled_hook( 'yoast_tracking' );
    }

    Please could someone else verify this?

    http://wordpress.org/extend/plugins/wordpress-seo/

Viewing 1 replies (of 1 total)
  • Moderator Ipstenu (Mika Epstein)

    (@ipstenu)

    Lead Plugin Wrangler

    It’s not.

    The code is clearly checking to see if you’ve allowed tracking. YES, it checks on every load, but that’s how it’s supposed to work. Every load it checks, sees a no, and moves on.

Viewing 1 replies (of 1 total)
  • The topic ‘Is WordPress SEO spying on us all?’ is closed to new replies.