WordPress Amazon Embed code is adding affiliate tracking code when any amazon product URL is pasted on both editors

[jayantkumarrana]

When I paste an amazon product URL (Either with affiliate id or without), WordPress by default is embediing the product on page(which is good) but also ading affiliate id its URL (Which is horrible).

I found this when I read this news on theDIgitalHacker(URL Given Below). I was finally relaxed when I got to know that my website is actually not hacked which I was preassuing when I saw this issue for the first time.

This website has covered the issue in details with proofs
​https://thedigitalhacker.com/this-wordpress-bug-is-adding-amazon-affiliate-core-when-url-in-pasted-in-editor/

[SergeyBiryukov]

Hi there, welcome to WordPress Trac! Thanks for the report.

There appear to be some misconceptions in the linked article:

• There is no kpembed-20 tag anywhere in WordPress core. You can see the full change in [41615] / #38181.
• If you view the page source for ​https://read.amazon.com/kp/embed?asin=1119666945 for example, it has the kpembed-20 tag without any WordPress involvement. It appears to be used by Amazon internally for embeds.

[jayantkumarrana]

Thanks for the reply @SergeyBiryukov . Can you please share the step to disable amazon auto-embed as it is creating a lot of issue while drafting prewritten articles.

[johnbillion]

@jayantkumarrana Are you the author of that article? If so I recommend you redact it entirely, or contact the author and recommend that they do. kpembed-20 is the default ref value that's used for all Amazon oEmbeds and nobody is earning $17M commission from this.

This can be seen in the response to an oEmbed request to Amazon (​https://read.amazon.com/kp/api/oembed?maxwidth=600&maxheight=870&url=https%3A%2F%2Fwww.amazon.com%2FAmazonBasics-Microfiber-Sheet-Set-Queen%2Fdp%2FB00Q7OAFDK%2F&dnt=1&format=json):

{
    "author_name": null,
    "width": 600,
    "html": "<iframe type=\"text/html\" width=\"600\" height=\"550\" frameborder=\"0\" allowfullscreen style=\"max-width:100%\" src=\"https://read.amazon.com/kp/card?preview=inline&linkCode=kpd&ref_=k4w_oembed_qWKQVhbjIwcPGC&asin=B00Q7OAFDK&tag=kpembed-20\"></iframe>",
    "provider_url": "https://www.amazon.com/b?ie=UTF8&node=13489836011",
    "type": "rich",
    "title": "AmazonBasics Lightweight Super Soft Easy Care Microfiber Sheet Set with 16\" Deep Pockets - Queen, Spa Blue",
    "provider_name": "Amazon",
    "version": "1.0",
    "height": 550
}