WPIntell

Source evidence

Plugin removed from WordPress plugins database?

Chatbot for WordPress by Collect.chat ⚡️ · support · 2023-11-09T12:15:00+00:00

Chatbot for WordPress by Collect.chat ⚡️ plugin evidence original source source API
mixedsentiment
highseverity
0.95relevance
4replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

6 / 35 rows with source links

17.1% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

29 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

support
Joe C resolved
I got a warning from WordFence that this plugin has been removed from WordPress. And sure enough, the plugin page currently has this message in red at the top: This plugin has been closed as of November 3, 2023 and is not available for download. This closure is temporary, pending a full review. Can you tell us why the plugin was removed? Are there security concerns regarding the current version? Hi Joe, This happened because of a misunderstanding. One hacker reported an issue with WordPress, and the system automatically removed our plugin. As you might know, we have a field where you can add a code snippet, which will run on your site. This hacker thought the code is run because of an XSS script vulnerability. This is the app’s core function, and only admins can add a script that needs to be run on their own site. We are already talking with the WordPress team to resolve this ASAP and bring the plugin back. Thank you for using our plugin, and I expect your continued support. Thank you for the fast response! Yes, that does make sense. I guess WordPress err on the side of caution. We’re still happily using Collect.Chat on our sites 🙂 how long it takes? Hi, We are not sure how long it takes. We have submitted the necessary proof to the WordPress team and are waiting for their reply. Meanwhile, you may use other plugins with script insert feature to install collectchat on your website. https://wordpress.org/plugins/search/insert+script/ Thank you

Comments

4 shown
collectchat 2023-11-09T12:38:00+00:00

Hi Joe, This happened because of a misunderstanding. One hacker reported an issue with WordPress, and the system automatically removed our plugin. As you might know, we have a field where you can add a code snippet, which will run on your site. This hacker thought the code is run because of an XSS script vulnerability. This is the app’s core function, and only admins can add a script that needs to be run on their own site. We are already talking with the WordPress team to resolve this ASAP and bring the plugin back. Thank you for using our plugin, and I expect your continued support.

Joe C 2023-11-09T17:50:00+00:00

Thank you for the fast response! Yes, that does make sense. I guess WordPress err on the side of caution. We’re still happily using Collect.Chat on our sites 🙂

mpcav 2023-11-15T17:35:00+00:00

how long it takes?

collectchat 2023-11-16T05:34:00+00:00

Hi, We are not sure how long it takes. We have submitted the necessary proof to the WordPress team and are waiting for their reply. Meanwhile, you may use other plugins with script insert feature to install collectchat on your website. https://wordpress.org/plugins/search/insert+script/ Thank you