id	summary	reporter	owner	description	type	status	priority	milestone	component	version	severity	resolution	keywords	cc
12129	Generic login failure message	scohoust	ryan	"I'm happy to be told that this is not important but something I felt like mentioning. Take a common web application and get your password wrong - very often you'll be told the username/password combination is wrong (and not specifically your password). 

WordPress doesn't do this, instead it will tell simply tell you that the password is wrong. Helpful perhaps to the user but also a bit of a security issue? 

Patch changes the message to not differentiate between a correct or incorrect username."	enhancement	closed	low		Security		normal	wontfix