Hi @froggod
No, what you describe is not a security issue
This happens because even on multisite there is only 1 database for your users (posts or comments are separated per site, but users do not get splitted in this way)
For that at the moment you use any of our tools, all users will appear
Hope it helps!
I understand that multisite shares a user table, but this is still a security issue because any admin on a subsite can download a file containing emails for all users across the network.
This is a huge problem for gdpr and just not good in general. There are ways to only pull user data from individual subsites even though they’re sharing the same tables.
Hi @froggod
Your are right, I didn’t think about it in the way you mention so I just added this change to our roadmap to only export users from the site the tool gets executed
Thank you so much for your suggestion and help us make GamiPress better!