[wp-forums] Some security bug posted on the forums
Sergey Biryukov
sergeybiryukov.ru at gmail.com
Mon Mar 17 13:32:33 UTC 2014
On Mon, Mar 17, 2014 at 3:11 PM, andrew nevins <andrew.nevins.misc at gmail.com
> wrote:
> He posted the same thing a couple of days ago here:
>
> https://wordpress.org/support/topic/welcome-user-email-does-not-contain-password?replies=1
>
> I redacted the login credentials on the post.
>
Replied. Appears to be a BuddyPress bug:
https://buddypress.trac.wordpress.org/ticket/5466
The "Password: [User Set]" part did not need to be redacted, it was
actually the issue he was reporting.
Sergey
More information about the wp-forums
mailing list