[wp-trac] [WordPress Trac] #53373: Reset password process reveals if an email address exists in the database

WordPress Trac noreply at wordpress.org
Wed Jun 9 21:42:56 UTC 2021


#53373: Reset password process reveals if an email address exists in the database
------------------------------------+------------------------
 Reporter:  henry.wright            |       Owner:  (none)
     Type:  enhancement             |      Status:  closed
 Priority:  normal                  |   Milestone:
Component:  Login and Registration  |     Version:
 Severity:  normal                  |  Resolution:  duplicate
 Keywords:                          |     Focuses:
------------------------------------+------------------------
Changes (by jorbin):

 * status:  new => closed
 * resolution:   => duplicate
 * milestone:  Awaiting Review =>


Comment:

 This is by design. There is a balance to be made between security and
 user-friendliness.

 The decision to leave this alone has been made many many times as shown in
 the following tickets (if not others).
 Related, duplicate: #3708, #4290, #5301, #12129, #22421, #31787, #45318

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/53373#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list