WP GDPR MAR 2022: 10 Covert Sensitive Data Disclosures MAR 2022

MANAGED WP GDPR MAR 2022 REPORT

Sensitive Data Disclosures MAR 2022

Be informed about the latest WP GDPR MAR 2022 - Sensitive Data Disclosures MAR 2022, identified and reported publicly. These Sensitive or Private Data Disclosures have a severe negative financial impact on any business. Consider our WP/Woo GDPR audit.

An estimated 3.388.000+ active WordPress installations are susceptible to these personal data exfiltrations, considering only the publicly available numbers. It is a whooping 150% decrease compared to last month. The estimated number can double with versions already closed due to security concerns.

• Download Manager - Sensitive Information Disclosure
  • WordPress Download Manager is a Files / Documents Management Plugin to manage, track and control file downloads from your WordPress Site. Use Passwords, User Roles to control access to your files, control downloads by speed or by putting a limit on download count per user, block bots or unwanted users or spammers using Captcha Lock or IP Block feature, you may also ask users to agree with your terms and conditions before they download. Active installations: 100,000 +

---

• CorreosExpress – Shipping Management – Tags - Sensitive Information Disclosure
  • This plugin has been closed as of November 29, 2021 and is not available for download. Reason: Security Issue.

---

• Comments – wpDiscuz - Sensitive Information Disclosure
  • AJAX realtime comment system with custom comment form and fields. Designed to supercharge WordPress native comments. Super fast and responsive with dozens of features. This is the best alternative to Disqus and Jetpack Comments, if you want to keep your comments in your database. Active installations: 90,000+

---

• Ultimate GDPR & CCPA Compliance Toolkit for WordPress - Unauthenticated Plugin Settings Export and Import
  • The General Data Protection Regulation standardizes data protection law across all twenty-eight EU countries and imposes strict new rules on controlling and processing identifiable information. All websites collecting data from EU citizens must meet these GDPR requirements. Failure to comply can result in fines up to €20 million or 4% global turnover, or compensation claims for damages incurred. Active installations: 7800+

---

• Cookie Information | Free GDPR Consent Solution - Reflected Cross-Site Scripting (XSS)
  • This plugin helps your website stay compliant with GDPR using a free cookie pop-up, consent log, and more. Active installations: 100,000+

---

• Customize WordPress Emails and Alerts – Better Notifications for WP - Email Address Disclosure
  • Better Notifications for WP is a simple but powerful plugin for beginners to advanced users that allows you to customise the email notifications that WordPress sends using the WYSIWYG editor and shortcodes. Active installations: 40,000 +

---

• Custom Content Shortcode - Authenticated Stored Cross-Site Scripting (XSS)
• Custom Content Shortcode - Authenticated Arbitrary File Access / Local File Inclusion (LFI)
  • From a single field to entire pages, Custom Content Shortcode is a set of commands to display content where you need. Active installations: 10,000 +

---

• UpdraftPlus WordPress Backup Plugin - Arbitrary Backup Downloads
  • UpdraftPlus simplifies backups and restoration. It is the world’s highest ranking and most popular scheduled backup plugin, with over three million currently-active installs. Backup your files and database backups into the cloud and restore with a single click! Active installations: 3+ million

---

• Video Conferencing with Zoom - E-mail Address Disclosure
  • Simple plugin which gives you the extensive functionality to manage Zoom Meetings, Webinars, Recordings, Users, Reports from your WordPress Dashboard. Active installations: 30,000+

---

• Smart Forms – when you need more than just a contact form - Form Data Download
  • So you want to create a beautiful form, the problem is, you are not a developer and of course you have no time to learn any of that?, well, if that is you (or your client) this is the plugin for you. Active installations: 10,000+

---

WP GDPR MAR 2022 BRIEF: Personal or Private data is information that must be protected against unauthorised access, preventing Sensitive Data Disclosures and data breaches.

---

What is Sensitive Data Disclosures MAR 2022?

The loss, misuse, modification or unauthorised access to your most sensitive data or personal data can damage your business, ruin customer trust, breach customer privacy and in extreme cases, might attract hefty fines by law regulations.

What is the impact of a WP GDPR MAR 2022?

Data privacy is becoming more and more imperative. Fines vary from country to country in Europe. In over 80 countries, personally identifiable information (PII) is protected by information privacy laws that outline limits to collecting and using PII by public and private organisations.

These laws require organisations to give clear notice to individuals about what sensitive data is collected, the reason for collecting and the planned uses of the data. In consent-based legal frameworks, like WP/Woo GDPR, explicit consent from the individual is required.

What kind of Sensitive Data are exploited??

Sensitive information includes all Private Data, whether original or copied, which contains:

- Personal data: as defined by The EU General Data Protection Regulation (WP/Woo GDPR). A series of broad laws to prevent or discourage identity theft and to guard and protect individual privacy. In general, sensitive data is any data that reveals: Racial or ethnic origin; Political opinion; Religious or philosophical beliefs; Trade union membership; Genetic data; Biometric data; Health data; Sex life or sexual orientation; Financial information (bank account numbers and credit card numbers); Classified information.

- Protected Health Information (PHI): as defined by the Health Insurance Portability and Accountability Act of 1996 (HIPAA). PHI under the law is any information about health status, provision of health care, or payment for health care that is created or collected by a Covered Entity (or a third-party associate) that can be linked to a specific individual.

- Education records: as defined by the Family Educational Rights and Privacy Act of 1974 (FERPA). FERPA governs access to educational information and records by potential employers, publicly funded educational institutions, and foreign governments.

- Customer information: as required by financial institutions to explain how they share and protect their customers' private information.

MANAGED GDPR for your WP/Woo: Sensitive Data Disclosures MAR 2022 Related Posts