[wp-trac] [WordPress Trac] #40097: Plugin steals visitors' data

[WordPress Trac]

#40097: Plugin steals visitors' data
--------------------------+-----------------------------------
 Reporter:  stevenc99     |      Owner:
     Type:  defect (bug)  |     Status:  new
 Priority:  normal        |  Milestone:  Awaiting Review
Component:  Plugins       |    Version:
 Severity:  normal        |   Keywords:  data security malware
  Focuses:                |
--------------------------+-----------------------------------
 Hi,

 This plugin sends visitors' data (IP address, user agent, URLs visited) to
 a third-party server without knowledge or consent of either the visitors,
 or the operator of the Wordpress site who would install this plugin:
 https://plugins.trac.wordpress.org/browser/no-comments/trunk/no-
 comments.php#L79

 However, I don't see it available any more for download on wordpress.org,
 why is that?
 https://wordpress.org/plugins/no-comments/

 *If* it was deleted there (e.g as potential malware), please be so kind as
 to leave notice of that at the plugin's original URL, instead of an
 unexplained 404.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/40097>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform