Exposes all your customers personal info

  • Do NOT use this extension. It exposes all your customers information and lets google invoice followed by your site name and it shows all the PDFs. This is a huge privacy violation so quickly uninstall the extension and delete the folder /wp-content/uploads/ywpi-pdf-invoice.

    • This topic was modified 7 years, 8 months ago by djnativus.
Viewing 3 replies - 1 through 3 (of 3 total)
  • Plugin Author YITHEMES

    (@yithemes)

    Hi @djnativus,
    we do not see the issue you reported, why did you not submitted a support thread in order to let us see it and eventually fix it?

    Thread Starter djnativus

    (@djnativus)

    Because when operating a shopping business to remain PCI compliant I must remove any plugin immediately when a huge privacy violation is found with my customers.

    The folder your plugin creates that stores the pdfs is indexed. This is bad.

    Plugin Author YITHEMES

    (@yithemes)

    Well,
    we understood your claims and agree with you but it’s up to the website developers to put the wp-content folder secure and not navigable to users.

Viewing 3 replies - 1 through 3 (of 3 total)
  • The topic ‘Exposes all your customers personal info’ is closed to new replies.