[wp-trac] [WordPress Trac] #63125: Let hidden if an email address is registered on the website

WordPress Trac noreply at wordpress.org
Wed Mar 19 10:26:17 UTC 2025


#63125: Let hidden if an email address is registered on the website
------------------------------------+------------------------------
 Reporter:  SGr33n                  |       Owner:  (none)
     Type:  enhancement             |      Status:  new
 Priority:  normal                  |   Milestone:  Awaiting Review
Component:  Login and Registration  |     Version:  trunk
 Severity:  normal                  |  Resolution:
 Keywords:                          |     Focuses:
------------------------------------+------------------------------

Comment (by SGr33n):

 Replying to [comment:1 r3n0]:

 Hi!
 Sure, an already registered email would recive, also registering, the lost
 password link.
 Huge databases exist, but this is not only for bruting force. It's also,
 in my opinion, a privacy leak. If I know your email and I wanna check if
 you're registered on that site I can.

 Don't just think on WordPress as a blog, think if it's a WooCommerce
 online pharmacy, I could know if you buyed something on that ecommerce...
 just as an example.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/63125#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list