sendcloud-connected-shipping

This plugin creates a WordPress user with Shop Manager privileges without notifying or asking the site admin — and it relies on that user account to maintain its integration with Sendcloud. That’s a serious security and transparency issue. The account isn’t optional or secondary; it’s a core part of how the plugin connects to the service, yet there’s no disclosure of this behavior during setup. Silent user creation with elevated privileges goes against WordPress best practices and undermines trust. Until this is made transparent and optional, I can’t recommend this plugin for any site concerned with proper access control and security hygiene.