[wp-trac] [WordPress Trac] #63125: Let hidden if an email address is registered on the website
WordPress Trac
noreply at wordpress.org
Wed Mar 19 10:26:17 UTC 2025
#63125: Let hidden if an email address is registered on the website
------------------------------------+------------------------------
Reporter: SGr33n | Owner: (none)
Type: enhancement | Status: new
Priority: normal | Milestone: Awaiting Review
Component: Login and Registration | Version: trunk
Severity: normal | Resolution:
Keywords: | Focuses:
------------------------------------+------------------------------
Comment (by SGr33n):
Replying to [comment:1 r3n0]:
Hi!
Sure, an already registered email would recive, also registering, the lost
password link.
Huge databases exist, but this is not only for bruting force. It's also,
in my opinion, a privacy leak. If I know your email and I wanna check if
you're registered on that site I can.
Don't just think on WordPress as a blog, think if it's a WooCommerce
online pharmacy, I could know if you buyed something on that ecommerce...
just as an example.
--
Ticket URL: <https://core.trac.wordpress.org/ticket/63125#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform
More information about the wp-trac
mailing list