WordPress.org

Make WordPress Core

Opened 3 years ago

Closed 3 years ago

Last modified 3 years ago

#15267 closed defect (bug) (wontfix)

'password_reset_message' filter arguments

Reported by: arena Owned by:
Priority: normal Milestone:
Component: Mail Version: 3.1
Severity: critical Keywords:
Cc:

Description

as in filter

'retrieve_password_message' arguments allows to bypass the wp_mail function ($message, $key)

in filter 'password_reset_message' it is not the case.

in pluggable.php

the line

$message = apply_filters('password_reset_message', $message, $new_pass);

has to be

$message = apply_filters('password_reset_message', $message, $new_pass, $key);

thank you

Change History (2)

comment:1 arena3 years ago

  • Resolution set to wontfix
  • Status changed from new to closed

not applicable in 3.1

comment:2 nacin3 years ago

  • Milestone Awaiting Review deleted
Note: See TracTickets for help on using tickets.