WPIntell

Source evidence

Stores password in plaintext

constant contact · review · 2015-07-05T00:45:00+00:00

constant contact plugin evidence original source source API
complaintsentiment
highseverity
0.79relevance
0replies
Evidence linked to opportunitycommercial context

Proof Health

Open evidence

Commercial opportunities need traceable source links before they are treated as build-worthy.

4 / 27 rows with source links

14.8% of this page's analysis has direct source links.

0 build-decision rows missing links

0 rows here require auditable proof before promotion.

23 rows with no attached evidence

0 rows have source counts but still need direct links.

Conversation

review · 1 stars
rootwork unresolved
This plugin asks for you to input your Constant Contact password directly into WordPress, which it then transmits to Constant Contact. This is a huge gaping security hole. You should run far, far away from this plugin if you’re not willing to risk having your Constant Contact account compromised. Look for other plugins that use OAuth or similar standards for safely authorizing your Constant Contact account without handing your password in plaintext to a plugin on your website.

Comments

0 shown

No comments were stored for this source.