Serious Privacy Issue
-
The author of a post can manage the subscription of other users subscribed to his post.
This is a big privacy problem because he can see all emails of the users that have subscribed to his post.
And it’s not enough to delete the manager_link from the configuration page of the plugin, because the author can anyway reach the page and see others email with the link/comment-subscriptions/?srp=POST-ID
I think it would be better to get completly rid of this function or allow to completely disable it.
I love this plugin and I hope this problem will be solved soon to be able to activate it again.
Thank you
https://www.ads-software.com/plugins/subscribe-to-comments-reloaded/
- The topic ‘Serious Privacy Issue’ is closed to new replies.