CHKPLUG: Checking GDPR Compliance of WordPress Plugins via Cross-language Code Property Graph

Abstract

plugins. Our evaluation shows that C HK P LUG achieves good performance with 98.8% TNR (True Negative Rate) and 89.3% TPR (True Positive Rate) in checking whether a certain WordPress plugin complies with GDPR. To investigate the current surface of the marketplace, we perform a measurement analysis which shows that 368 plugins violate data deletion regulations, meaning plugins do not provide any functionalities to erase user information from the website.