If you need any more proof, just check Slingpic javascript that is imported into the wordpress installation.
Open the following file and search for affec to easily check that the plugin contains malicious code:
http://cdn.slingpic.com/js/slingpic.plugin.js?v=5
P.S. Affec is an advertisment company and you can find more info here:
http://affectv.co.uk/
Hello Michalis
Thank you for raising this. We work with a couple of advertising companies including Affectv and that is how we are able to support the development of this plugin. We DO NOT insert any advertisement on the website itself.
Our T&Cs on http://slingpic.com/privacy/index.html outline what we do with data and how we use it. The code is called in certain circumstances only and we have verified it as safe. I don’t believe we are violating the T&Cs for building WordPress plugins.
Do let me know if this has addressed your concerns.
Regards
Ben
Moderator
Jan Dembowski
(@jdembowski)
Forum Moderator and Brute Squad
*Reads*
@benjackson84 I don’t know how your plugin works or what it does (yet) but what’s this line do?
https://plugins.trac.wordpress.org/browser/slingpic/trunk/slingpic.php#L672
If a user comments it out, does your plugin still work? It’s an important question. 😉
Plugin Team is on it!
The developer said he’d fix it by Wednesday.
@benjackson84 Have a look at the WordPress guidelines, and specifically on point 7 (first and second bullet-points):
https://wordpress.org/plugins/about/guidelines/
Your plugin seems to violate both guidelines.
Also the fact that you mention the advertisements in your T&Cs in your website, but still there is no single reference in the WordPress plugin’s site, is at least suspicious. You can’t seriously expect from a user to dig through your website and to find the T&Cs.
Finally, for using our data for marketing purposes you should ask for user’s consent (opt-in), which I don’t remember your plugin to do.
Anyway, I stopped using your plugin and I don’t plan to use it ever again. I just want to inform the rest of the users about the potential privacy breach.
Best,
Michalis
