[wp-forums] Some security bug posted on the forums

Sergey Biryukov sergeybiryukov.ru at gmail.com
Mon Mar 17 13:32:33 UTC 2014


On Mon, Mar 17, 2014 at 3:11 PM, andrew nevins <andrew.nevins.misc at gmail.com
> wrote:

> He posted the same thing a couple of days ago here:
>
> https://wordpress.org/support/topic/welcome-user-email-does-not-contain-password?replies=1
>
> I redacted the login credentials on the post.
>

Replied. Appears to be a BuddyPress bug:
https://buddypress.trac.wordpress.org/ticket/5466

The "Password: [User Set]" part did not need to be redacted, it was
actually the issue he was reporting.

Sergey


More information about the wp-forums mailing list