Identity Theft Vulnerability Found in WordPress Gravity Forms Plugin Solved with New UETA/ESIGN Compliant Signature Plugin by Approve Me

    SAN FRANCISCO, CA, September 17, 2015 /24-7PressRelease/ -- An identity theft vulnerability which is related to an insecure method used to store images of a signer's hand drawn signature has been identified in one of WordPress' most popular form plugins. The original Gravity Forms non-compliant Signature Add-On (available on Gravity Form's website) uses a method that saves the users signature (the same signature which is used to buy a house, apply for a credit card, take out a business loan, etc.) on an ftp server, putting both the site owner and their signers at high risk for identity theft.

Today ApproveMe announces a solution that patches this security vulnerability for Gravity Forms users by applying it's proprietary esignature security protocol's to the signature transmission process and complying with the Uniform Electronics Transactions Act (UETA)/U.S. E-Sign Act.

The electronic signature industry is a highly regulated industry, harboring strict laws and regulations surrounding the electronic signature and digital signature transmission process. Given the consistent rise of WordPress usage (over 74,652,825 websites are currently running WordPress), and the fact that 23% of the internet currently employs the open source content manager[1], a large number of freelancers and small business owners are unknowingly putting themselves and their clients at risk for identity theft by using non-compliant and vulnerable signature plugins.

"Most WordPress contract plugins and signature Add-Ons out there are not legally binding, let alone UETA/ESIGN compliant," says ApproveMe CEO, Kevin Michael Gray.

"These plugins and add-ons do not adhere to the strict laws and regulations in the document singing industry. Typical signature Add-Ons only capture signature information as it is drawn. The signature data is sent to the web server where this information is converted into a PNG image and stored on a server (which is often times shared with hundreds of other websites on a cheap hosting plan unbeknownst to the website owners)," says Gray.

ApproveMe.me has created the first legally binding, UETA/ESIGN compliant, self-hosted WordPress plugin that solves this esignature identity theft vulnerability. Their new WordPress plugin allows freelancers, entrepreneurs and small business owners to safely and confidently accept legitimate digital (encrypted) signatures on their contracts and proposals without exposing the actual signature of their signers to FTP intruders. No image of the legal signature is stored on the FTP server.

For more information or to test out the demo, please visit: https://www.approveme.me/gravity-forms-signature/

The new WordPress plugin can be download here: https://wordpress.org/plugins/gravity-signature-forms-add-on

ApproveMe is the company behind WP E-Signature, which transforms any WordPress website into a secure, UETA/ESIGN compliant and customizable document signing application (but without the monthly fees).

# # #