Forum Copilot Open Source Mobile App 1.3.2

[Goodfella]

I briefly looked into this and believe the plugin sends the admin’s email address, along with some additional details, to the developer’s server whenever the plugin admin dashboard is accessed.

@forumcopilot , would you mind clarifying what data is transmitted? For example, are private messages also sent back to your server?

I think it’s important if not policy to disclose this.

 

[Katelyn]

I briefly looked into this and believe the plugin sends the admin’s email address, along with some additional details, to the developer’s server whenever the plugin admin dashboard is accessed.

Just to clarify, the concern here is that we were contacted unexpectedly using license-related information that was never provided to this developer directly. We never opted into, subscribed to, or requested any form of marketing communication from them in the first place.

What makes this concerning is that this individual clearly had access to certain XF license details, as well as non-public email addresses. We’ve asked multiple times where this information originated from, yet there has been no public response or clarification regarding the source of the data.

To reiterate, this does not appear to be an issue with XenForo (company) itself. Based on the circumstances, it seems far more likely that the information originated from a third-party vendor or developer that previously had access to these details and either shared or sold the data elsewhere.