[wp-trac] [WordPress Trac] #64793: Options: Mask connector API keys on All Options screen

WordPress Trac noreply at wordpress.org
Wed Mar 4 14:55:12 UTC 2026


#64793: Options: Mask connector API keys on All Options screen
------------------------------+-----------------------
 Reporter:  jorgefilipecosta  |      Owner:  (none)
     Type:  defect (bug)      |     Status:  new
 Priority:  normal            |  Milestone:  7.0
Component:  General           |    Version:  trunk
 Severity:  normal            |   Keywords:  has-patch
  Focuses:                    |
------------------------------+-----------------------
 == Description ==

 Connector API keys are visible in plain text on the All Options screen
 (`wp-admin/options.php`). The connectors system masks keys via
 `option_{$option_name}` filter, but options.php queries the database
 directly, bypassing `get_option()`.

 == Steps to Reproduce ==

 1. Configure a connector API key via Settings > Connectors
 2. Navigate to `wp-admin/options.php`
 3. Search for `connectors_`

 == Proposed Solution ==

 Add an `elseif` branch that masks options matching `connectors_*_api_key`
 using the existing `_wp_connectors_mask_api_key()` function.

 == Related ==

 PR: https://github.com/WordPress/wordpress-develop/pull/11158

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/64793>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list