Top-Rated Shopify Plugin Exposes Hundreds of Stores to Takeovers, Token Leaks

A Shopify plugin meant to safeguard privacy did the opposite. For over 100 days, it quietly exposed hundreds of online stores to the kind of risk most businesses dread; data theft, full account takeover, and hijacked ad spend.  Ironically, the culprit was a compliance plugin called Consentik, built to help Shopify merchants adhere to regulations […]

This article has been indexed from Information Security Buzz

Read the original article: