{"id":19018076,"date":"2026-09-11T19:42:00","date_gmt":"2026-09-11T19:42:00","guid":{"rendered":"https:\/\/wordpress.org\/support\/topic\/cookie-pys_advanced_form_data\/"},"modified":"2026-09-11T19:42:00","modified_gmt":"2026-09-11T19:42:00","slug":"cookie-pys_advanced_form_data","status":"publish","type":"topic","link":"https:\/\/wordpress.org\/support\/topic\/cookie-pys_advanced_form_data\/","title":{"rendered":"Cookie pys_advanced_form_data"},"content":{"rendered":"\n<p class=\"wp-block-paragraph\">Hi,<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">Accidentally I have discovered that your plugin creates cookie with name pys_advanced_form_data, which contains first name, last name, email and phone number of the user. Everything stored as a plain text.<\/p>\n\n\n\n<p class=\"wp-block-paragraph\">In my opinion it is dangerous behaviour, because it exposes personal data in a widely accessible cookie (and can be logged by proxy mechanisms etc.)<br \/><br \/>Also it can lead to invalid attribution of events on shared computers.<\/p>\n","protected":false},"template":"","class_list":["post-19018076","topic","type-topic","status-publish","hentry"],"jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19018076","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic"}],"about":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/types\/topic"}],"version-history":[{"count":0,"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/topic\/19018076\/revisions"}],"wp:attachment":[{"href":"https:\/\/wordpress.org\/support\/wp-json\/wp\/v2\/media?parent=19018076"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}