Not this plugin
-
Edit: Not this plugin. The plugin in question is
https://ww.wp.xz.cn/support/plugin/disable-comments/
This plugin injects a weird (potentially harmful) script from CloudFront
Something like this:
<script data-cfasync="false" src="//d2hdyssxn6lpj2.cloudfront.net/?sydhd=1176969" defer>Not sure what this is for. And not sure why it need to connect to a shady domain.

Chrome dev console:

Disabling the plugin removes the error.
The topic ‘Not this plugin’ is closed to new replies.