• Resolved haywardgb

    (@haywardgb)


    Upon recent discovery, it has come to my attention that the code used in the forms of this application is inadvertently disclosing my profile username and email address. This may come as a disappointment to those, like myself, who have opted to display a different public name (on posts and pages) instead of the default username, and have taken additional measures to hide their username from search engines through the use of plugins. Unfortunately, this plugin allows users to easily uncover this information through a simple review of the Page Source. Furthermore, if you have chosen to keep your profile email private and use a separate email for forms, this plugin also inadvertently exposes that private email address. As an individual who has paid for an upgraded version of this app in the past, I am dismayed to learn that my username and profile email have been leaked through the code of this plugin for an extended period of time. 🙁 Thank you for your attention to this matter.

    • This topic was modified 1 year ago by haywardgb.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author EDGARROJAS

    (@edgarrojas)

    Hello!

    Are you using a chache plugin? The form doesn’t display the admin email or user name but the user and email name of the current user viewing the page. If the page was cached and for some reason the javascript section is not refreshed it could mean that the wrong email and username was stored in the HTML section.

    Regards!

    Thread Starter haywardgb

    (@haywardgb)

    Thank you. That makes much sense and apologise for the concern.

    To avoid confusion, either delete original post or hopefully they read this and don’t panic. Thank you again for your quick response.

    • This reply was modified 1 year ago by haywardgb.
    Moderator Steven Stern (sterndata)

    (@sterndata)

    Volunteer Forum Moderator

    Moderator note:

    @haywardgb I’m sorry but no. Unless it is an extreme case, posts and replies are not edited here.

    Forum topics will only be edited or deleted if they represent a valid legal, security, or safety concern. You asked a question, got a response, and it’s done.

    See https://wordpress.org/support/forum-user-guide/faq/#will-you-delete-my-post-once-the-problem-is-solved and https://wordpress.org/about/privacy/

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘My username and profile email are being leaked!’ is closed to new replies.