{"id":305175,"date":"2026-05-28T08:47:49","date_gmt":"2026-05-28T08:47:49","guid":{"rendered":"https:\/\/wordpress.org\/plugins\/abmahn-shield\/"},"modified":"2026-05-28T08:47:38","modified_gmt":"2026-05-28T08:47:38","slug":"abmahn-shield","status":"publish","type":"plugin","link":"https:\/\/mg.wordpress.org\/plugins\/abmahn-shield\/","author":23488506,"comment_status":"closed","ping_status":"closed","template":"","meta":{"version":"1.0.6","stable_tag":"1.0.6","tested":"6.9.4","requires":"5.8","requires_php":"7.4","requires_plugins":null,"header_name":"Abmahn-Shield","header_author":"Abmahn-Shield","header_description":"Compliance-Monitoring f\u00fcr WooCommerce-Shops. Pr\u00fcft Impressum, Datenschutz, Cookie-Banner, AGB, Widerrufsbelehrung, Google Fonts und BFSG-Barrierefreiheit.","assets_banners_color":"9ea99c","last_updated":"2026-05-28 08:47:38","external_support_url":"","external_repository_url":"","donate_link":"","header_plugin_uri":"https:\/\/abmahn-shield.de\/woocommerce","header_author_uri":"https:\/\/abmahn-shield.de","rating":0,"author_block_rating":0,"active_installs":0,"downloads":43,"num_ratings":0,"support_threads":0,"support_threads_resolved":0,"author_block_count":0,"sections":["description","installation","faq","changelog"],"tags":{"1.0.6":{"tag":"1.0.6","author":"abmahnshield","date":"2026-05-28 08:47:38"}},"upgrade_notice":{"1.0.6":"<p>Privacy fix: the Quick-Scan no longer triggers any background site registration with Abmahn-Shield servers. Site registration is now strictly opt-in via the Deep-Scan flow.<\/p>","1.0.5":"<p>External-services documentation extended (per-domain terms\/privacy links) and Deep-Scan price reduced to 9,90 EUR.<\/p>","1.0.4":"<p>Readme cleanup for WordPress.org plugin directory compliance (English short description, tag limit).<\/p>","1.0.3":"<p>Security fix: removed an unused public REST endpoint to harden payment-status handling.<\/p>","1.0.2":"<p>Payment-Provider auf Stripe umgestellt, External-Services-Dokumentation aktualisiert.<\/p>","1.0.1":"<p>Readme update: external services documentation for WordPress.org compliance.<\/p>","1.0.0":"<p>Erster Release von Abmahn-Shield f\u00fcr WooCommerce.<\/p>"},"ratings":[],"assets_icons":{"icon-128x128.png":{"filename":"icon-128x128.png","revision":3551777,"resolution":"128x128","location":"assets","locale":"","width":128,"height":128},"icon-256x256.png":{"filename":"icon-256x256.png","revision":3551777,"resolution":"256x256","location":"assets","locale":"","width":256,"height":256}},"assets_banners":{"banner-1544x500.png":{"filename":"banner-1544x500.png","revision":3551760,"resolution":"1544x500","location":"assets","locale":"","width":1544,"height":500},"banner-772x250.png":{"filename":"banner-772x250.png","revision":3551760,"resolution":"772x250","location":"assets","locale":"","width":772,"height":250}},"assets_blueprints":{},"all_blocks":[],"tagged_versions":["1.0.6"],"block_files":[],"assets_screenshots":{"screenshot-1.png":{"filename":"screenshot-1.png","revision":3551760,"resolution":"1","location":"assets","locale":"","width":1280,"height":800},"screenshot-2.png":{"filename":"screenshot-2.png","revision":3551760,"resolution":"2","location":"assets","locale":"","width":1280,"height":800}},"screenshots":{"1":"Quick-Scan Ergebnisse mit Risiko-\u00dcbersicht","2":"Deep-Scan Upsell mit Feature-\u00dcbersicht"}},"plugin_section":[],"plugin_tags":[264743,14361,154545,131785,19675],"plugin_category":[],"plugin_contributors":[264744],"plugin_business_model":[],"class_list":["post-305175","plugin","type-plugin","status-publish","hentry","plugin_tags-abmahnung","plugin_tags-compliance","plugin_tags-dsgvo","plugin_tags-gdpr","plugin_tags-impressum","plugin_contributors-abmahnshield","plugin_committers-abmahnshield"],"banners":{"banner":"https:\/\/ps.w.org\/abmahn-shield\/assets\/banner-772x250.png?rev=3551760","banner_2x":"https:\/\/ps.w.org\/abmahn-shield\/assets\/banner-1544x500.png?rev=3551760","banner_rtl":false,"banner_2x_rtl":false},"icons":{"svg":false,"icon":"https:\/\/ps.w.org\/abmahn-shield\/assets\/icon-128x128.png?rev=3551777","icon_2x":"https:\/\/ps.w.org\/abmahn-shield\/assets\/icon-256x256.png?rev=3551777","generated":false},"screenshots":[{"src":"https:\/\/ps.w.org\/abmahn-shield\/assets\/screenshot-1.png?rev=3551760","caption":"Quick-Scan Ergebnisse mit Risiko-\u00dcbersicht"},{"src":"https:\/\/ps.w.org\/abmahn-shield\/assets\/screenshot-2.png?rev=3551760","caption":"Deep-Scan Upsell mit Feature-\u00dcbersicht"}],"raw_content":"<!--section=description-->\n<p><strong>Abmahn-Shield<\/strong> pr\u00fcft deinen WooCommerce-Shop auf die h\u00e4ufigsten Abmahnrisiken im deutschen E-Commerce:<\/p>\n\n<h4>Kostenloser Quick-Scan<\/h4>\n\n<ul>\n<li>Impressum vorhanden und im Footer verlinkt?<\/li>\n<li>Datenschutzerkl\u00e4rung vorhanden und verlinkt?<\/li>\n<li>AGB-Seite konfiguriert?<\/li>\n<li>Widerrufsbelehrung vorhanden?<\/li>\n<li>Versandinformationen vorhanden?<\/li>\n<li>Google Fonts extern geladen? (BGH-Urteil 2022)<\/li>\n<li>Tracking-Scripte ohne Cookie-Consent?<\/li>\n<li>Grundpreis-Plugin (PAngV) aktiv?<\/li>\n<\/ul>\n\n<h4>Deep-Scan (optional, 9,90 EUR einmalig)<\/h4>\n\n<ul>\n<li>KI-gest\u00fctzte Analyse des vollst\u00e4ndigen HTML-Codes<\/li>\n<li>Impressum-Inhaltspr\u00fcfung (fehlen Pflichtfelder?)<\/li>\n<li>DSGVO-Konformit\u00e4t der Datenschutzerkl\u00e4rung<\/li>\n<li>Cookie-Banner-Funktionstest<\/li>\n<li>BFSG-Barrierefreiheitspr\u00fcfung (21+ WCAG 2.1 AA Regeln)<\/li>\n<li>Streitwert-Einsch\u00e4tzung pro Versto\u00df<\/li>\n<li>Priorisierte Fix-Empfehlungen<\/li>\n<\/ul>\n\n<h4>Rechtliche Grundlage<\/h4>\n\n<p>Basierend auf aktueller Rechtsprechung (BGH, EuGH) und Gesetzeslage:<\/p>\n\n<ul>\n<li>DDG \u00a75 (Impressumspflicht)<\/li>\n<li>DSGVO Art. 13 (Datenschutzerkl\u00e4rung)<\/li>\n<li>TDDDG \u00a725 (Cookie-Einwilligung)<\/li>\n<li>\u00a7355 BGB (Widerrufsrecht)<\/li>\n<li>PAngV (Grundpreisangaben)<\/li>\n<li>BFSG (Barrierefreiheitsst\u00e4rkungsgesetz, ab Juni 2025)<\/li>\n<li>BGH-Urteil Google Fonts 2022<\/li>\n<\/ul>\n\n<h4>Hinweis<\/h4>\n\n<p>Dies ist eine technische Compliance-Einsch\u00e4tzung, keine Rechtsberatung im Sinne des RDG. F\u00fcr rechtsverbindliche Pr\u00fcfung bitte einen Fachanwalt hinzuziehen.<\/p>\n\n<h3>External services<\/h3>\n\n<p>This plugin connects to the Abmahn-Shield API to perform Deep-Scans and process payments. The Quick-Scan runs entirely locally within your WordPress installation and does not send any data to external servers.<\/p>\n\n<h4>Abmahn-Shield API (Deep-Scan)<\/h4>\n\n<p>When you initiate a Deep-Scan, the plugin sends your shop's URL to the Abmahn-Shield API for a comprehensive compliance analysis. No customer data, order data, or product data is ever transmitted.<\/p>\n\n<ul>\n<li><strong>What data is sent:<\/strong> Your shop's URL (home_url), your admin email address (for account registration and scan result delivery), and the scan ID.<\/li>\n<li><strong>When data is sent:<\/strong> Only when you explicitly click \"Deep-Scan starten\" or \"Jetzt kaufen\" in the plugin admin page.<\/li>\n<li><strong>Service provider:<\/strong> Abmahn-Shield, Dennis Stahlhut, Holsen 7a, 59075 Hamm, Germany.<\/li>\n<li><strong>API endpoints used:<\/strong>\n\n<ul>\n<li><code>https:\/\/abmahn-shield.de\/api\/wc\/register<\/code> \u2014 One-time site registration. Called only on the first Deep-Scan or first Deep-Scan checkout (never during the local Quick-Scan).<\/li>\n<li><code>https:\/\/abmahn-shield.de\/api\/wc\/scan<\/code> \u2014 Sends the shop URL for Deep-Scan analysis.<\/li>\n<li><code>https:\/\/abmahn-shield.de\/api\/wc\/checkout<\/code> \u2014 Initiates the payment process for the Deep-Scan report.<\/li>\n<\/ul><\/li>\n<li><strong>Terms of service:<\/strong> <a href=\"https:\/\/abmahn-shield.de\/agb\">https:\/\/abmahn-shield.de\/agb<\/a><\/li>\n<li><strong>Privacy policy:<\/strong> <a href=\"https:\/\/abmahn-shield.de\/datenschutz\">https:\/\/abmahn-shield.de\/datenschutz<\/a><\/li>\n<\/ul>\n\n<h4>Stripe (Payment Processing)<\/h4>\n\n<p>When you purchase a Deep-Scan report, the payment is processed by Stripe. The plugin does not handle any payment credentials directly. You are redirected to Stripe's secure payment page.<\/p>\n\n<ul>\n<li><strong>What data is sent:<\/strong> Your email address and the scan ID are passed to Stripe via the Abmahn-Shield API to create a payment session.<\/li>\n<li><strong>When data is sent:<\/strong> Only when you click \"Jetzt kaufen\" to purchase a Deep-Scan report.<\/li>\n<li><strong>Service provider:<\/strong> Stripe Technology Europe, Limited, 1 Grand Canal Street Lower, Grand Canal Dock, Dublin, D02 H210, Ireland.<\/li>\n<li><strong>Terms of service:<\/strong> <a href=\"https:\/\/stripe.com\/de\/legal\/consumer\">https:\/\/stripe.com\/de\/legal\/consumer<\/a><\/li>\n<li><strong>Privacy policy:<\/strong> <a href=\"https:\/\/stripe.com\/de\/privacy\">https:\/\/stripe.com\/de\/privacy<\/a><\/li>\n<\/ul>\n\n<h4>Local-only pattern matching (no external connections)<\/h4>\n\n<p>The Quick-Scan analyzes your shop's HTML output <strong>locally within WordPress<\/strong> to identify whether common third-party tracking scripts or font CDNs are loaded by your theme or other plugins. The plugin performs string comparisons against well-known domain names but <strong>does not connect to, transmit data to, or otherwise interact with<\/strong> any of these services. The domain names below appear in the plugin source code (<code>includes\/class-scanner.php<\/code>) only as literal string arguments to PHP's <code>strpos()<\/code> function.<\/p>\n\n<p>We document them here together with their terms and privacy policies so that you, as the shop operator, can make an informed compliance decision if the Quick-Scan reports that any of these scripts are present on your store.<\/p>\n\n<ul>\n<li><strong>Google Fonts CDN<\/strong> \u2014 detected domains: <code>fonts.googleapis.com<\/code>, <code>fonts.gstatic.com<\/code>\n\n<ul>\n<li>Service: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<\/li>\n<li>Terms: <a href=\"https:\/\/policies.google.com\/terms\">https:\/\/policies.google.com\/terms<\/a><\/li>\n<li>Privacy: <a href=\"https:\/\/policies.google.com\/privacy\">https:\/\/policies.google.com\/privacy<\/a><\/li>\n<\/ul><\/li>\n<li><strong>Google Analytics \/ Google Tag Manager<\/strong> \u2014 detected domains: <code>google-analytics.com<\/code>, <code>googletagmanager.com<\/code> (and <code>gtag(<\/code> function call)\n\n<ul>\n<li>Service: Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland.<\/li>\n<li>Terms: <a href=\"https:\/\/policies.google.com\/terms\">https:\/\/policies.google.com\/terms<\/a><\/li>\n<li>Privacy: <a href=\"https:\/\/policies.google.com\/privacy\">https:\/\/policies.google.com\/privacy<\/a><\/li>\n<\/ul><\/li>\n<li><strong>Meta Pixel (Facebook)<\/strong> \u2014 detected domains: <code>connect.facebook.net<\/code>, <code>facebook.com\/tr<\/code> (and <code>fbevents.js<\/code>)\n\n<ul>\n<li>Service: Meta Platforms Ireland Limited, 4 Grand Canal Square, Grand Canal Harbour, Dublin 2, Ireland.<\/li>\n<li>Terms: <a href=\"https:\/\/www.facebook.com\/legal\/terms\">https:\/\/www.facebook.com\/legal\/terms<\/a><\/li>\n<li>Privacy: <a href=\"https:\/\/www.facebook.com\/privacy\/policy\">https:\/\/www.facebook.com\/privacy\/policy<\/a><\/li>\n<\/ul><\/li>\n<li><strong>TikTok Pixel<\/strong> \u2014 detected domain: <code>tiktok.com\/i18n\/pixel<\/code>\n\n<ul>\n<li>Service: TikTok Technology Limited, 10 Earlsfort Terrace, Dublin, D02 T380, Ireland.<\/li>\n<li>Terms: <a href=\"https:\/\/www.tiktok.com\/legal\/page\/eea\/terms-of-service\/en\">https:\/\/www.tiktok.com\/legal\/page\/eea\/terms-of-service\/en<\/a><\/li>\n<li>Privacy: <a href=\"https:\/\/www.tiktok.com\/legal\/page\/eea\/privacy-policy\/en\">https:\/\/www.tiktok.com\/legal\/page\/eea\/privacy-policy\/en<\/a><\/li>\n<\/ul><\/li>\n<li><strong>Hotjar<\/strong> \u2014 detected domain: <code>hotjar.com<\/code>\n\n<ul>\n<li>Service: Hotjar Ltd., Dragonara Business Centre, 5th Floor, Dragonara Road, Paceville St Julian's STJ 3141, Malta.<\/li>\n<li>Terms: <a href=\"https:\/\/www.hotjar.com\/legal\/policies\/terms-of-service\/\">https:\/\/www.hotjar.com\/legal\/policies\/terms-of-service\/<\/a><\/li>\n<li>Privacy: <a href=\"https:\/\/www.hotjar.com\/legal\/policies\/privacy\/\">https:\/\/www.hotjar.com\/legal\/policies\/privacy\/<\/a><\/li>\n<\/ul><\/li>\n<li><strong>Microsoft Clarity<\/strong> \u2014 detected domain: <code>clarity.ms<\/code>\n\n<ul>\n<li>Service: Microsoft Ireland Operations Limited, One Microsoft Place, South County Business Park, Leopardstown, Dublin 18, D18 P521, Ireland.<\/li>\n<li>Terms: <a href=\"https:\/\/www.microsoft.com\/legal\/terms-of-use\">https:\/\/www.microsoft.com\/legal\/terms-of-use<\/a><\/li>\n<li>Privacy: <a href=\"https:\/\/privacy.microsoft.com\/privacystatement\">https:\/\/privacy.microsoft.com\/privacystatement<\/a><\/li>\n<\/ul><\/li>\n<\/ul>\n\n<p>To repeat: <strong>the plugin does not connect to, request from, or send any data to the services listed above.<\/strong> These domain strings exist only to recognize when those services are already embedded by the shop operator's theme or other plugins, so the Quick-Scan can warn about consent-related compliance risks under TDDDG \u00a725 and GDPR Art. 6.<\/p>\n\n<!--section=installation-->\n<ol>\n<li>Lade das Plugin hoch oder installiere es \u00fcber das WordPress Plugin-Verzeichnis.<\/li>\n<li>Aktiviere das Plugin unter \"Plugins\".<\/li>\n<li>Gehe zu WooCommerce &gt; Abmahn-Shield.<\/li>\n<li>Klicke \"Jetzt scannen\" f\u00fcr den kostenlosen Quick-Scan.<\/li>\n<\/ol>\n\n<!--section=faq-->\n<dl>\n<dt id=\"werden%20kundendaten%20%C3%BCbertragen%3F\"><h3>Werden Kundendaten \u00fcbertragen?<\/h3><\/dt>\n<dd><p>Nein. Der Quick-Scan l\u00e4uft komplett lokal in deiner WordPress-Installation. Beim Deep-Scan wird nur die URL deines Shops an den Abmahn-Shield Server \u00fcbertragen. Kunden-, Bestell- oder Produktdaten werden niemals \u00fcbermittelt.<\/p><\/dd>\n<dt id=\"funktioniert%20das%20plugin%20auch%20ohne%20woocommerce%3F\"><h3>Funktioniert das Plugin auch ohne WooCommerce?<\/h3><\/dt>\n<dd><p>Nein. Abmahn-Shield ist speziell f\u00fcr WooCommerce-Shops entwickelt und pr\u00fcft WooCommerce-spezifische Einstellungen wie AGB-Seite und Grundpreis-Plugins.<\/p><\/dd>\n<dt id=\"was%20kostet%20das%20plugin%3F\"><h3>Was kostet das Plugin?<\/h3><\/dt>\n<dd><p>Das Plugin und der Quick-Scan sind kostenlos. Der optionale Deep-Scan kostet einmalig 9,90 EUR (kein Abo).<\/p><\/dd>\n\n<\/dl>\n\n<!--section=changelog-->\n<h4>1.0.6<\/h4>\n\n<ul>\n<li>Privacy: Removed the implicit site-key registration call from the local Quick-Scan. The Quick-Scan is now strictly local and performs zero outbound HTTP requests to Abmahn-Shield servers. Site registration only happens on the first Deep-Scan (which is an explicit, opt-in user action triggered by clicking \"Deep-Scan starten\" or \"Jetzt kaufen\"). Readme \"External services\" entry for <code>\/api\/wc\/register<\/code> updated to reflect this.<\/li>\n<\/ul>\n\n<h4>1.0.5<\/h4>\n\n<ul>\n<li>Readme: extended \"External services\" section to explicitly document all third-party domains referenced in the local pattern-matching scanner (Google Fonts, Google Analytics\/GTM, Meta Pixel, TikTok Pixel, Hotjar, Microsoft Clarity). Each entry now includes the provider, terms of service, and privacy policy URL. No code changes; the plugin still does not connect to any of these services.<\/li>\n<li>Pricing: Deep-Scan price reduced from 14,90 EUR to 9,90 EUR (single one-time charge, still no subscription). Admin UI label updated accordingly.<\/li>\n<\/ul>\n\n<h4>1.0.4<\/h4>\n\n<ul>\n<li>Readme: short description rewritten in English per WordPress.org guidelines<\/li>\n<li>Readme: reduced tags to 5 (within plugin directory limit)<\/li>\n<\/ul>\n\n<h4>1.0.3<\/h4>\n\n<ul>\n<li>Security: Removed unused public REST endpoint <code>\/webhook\/stripe<\/code> that lacked Stripe signature verification. Stripe webhooks are handled exclusively by the Abmahn-Shield API server (with full signature verification); the plugin no longer exposes a webhook receiver.<\/li>\n<li>Removed unused <code>\/payment-status<\/code> REST endpoint (no consumers in the plugin UI).<\/li>\n<\/ul>\n\n<h4>1.0.2<\/h4>\n\n<ul>\n<li>Payment-Provider von Mollie auf Stripe umgestellt<\/li>\n<li>Readme: External-Services-Dokumentation f\u00fcr Stripe statt Mollie (g\u00fcltige ToS- und Privacy-URLs)<\/li>\n<li>Internes Webhook-Routing entsprechend angepasst<\/li>\n<\/ul>\n\n<h4>1.0.1<\/h4>\n\n<ul>\n<li>External services documentation added to readme.txt<\/li>\n<li>Plugin URI updated to working landing page<\/li>\n<\/ul>\n\n<h4>1.0.0<\/h4>\n\n<ul>\n<li>Erster Release<\/li>\n<li>Quick-Scan: Impressum, Datenschutz, AGB, Widerruf, Versand, Google Fonts, Tracker, PAngV<\/li>\n<li>Deep-Scan Integration via Abmahn-Shield API<\/li>\n<li>Stripe-Payment f\u00fcr Deep-Scan<\/li>\n<li>WordPress Admin-Seite unter WooCommerce-Men\u00fc<\/li>\n<\/ul>","raw_excerpt":"Protect your WooCommerce store from German legal compliance risks. Automated check for imprint, privacy policy, cookie banner, terms, and more.","jetpack_sharing_enabled":true,"_links":{"self":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin\/305175","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin"}],"about":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/types\/plugin"}],"replies":[{"embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/comments?post=305175"}],"author":[{"embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wporg\/v1\/users\/abmahnshield"}],"wp:attachment":[{"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/media?parent=305175"}],"wp:term":[{"taxonomy":"plugin_section","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_section?post=305175"},{"taxonomy":"plugin_tags","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_tags?post=305175"},{"taxonomy":"plugin_category","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_category?post=305175"},{"taxonomy":"plugin_contributors","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_contributors?post=305175"},{"taxonomy":"plugin_business_model","embeddable":true,"href":"https:\/\/mg.wordpress.org\/plugins\/wp-json\/wp\/v2\/plugin_business_model?post=305175"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}