Worpress exposes clear text passwords in the UI
|Reported by:||nh2||Owned by:|
Wordpress shows clear text passwords in at least the following:
- The options page: mailserver password
- The setup assistant: database password (!)
- Maybe in wp-admin/network/site-users.php (search for "user_password") - I don't really know where to find that page being rendered
- The metaboxes include.
See the attached patches against the current SVN trunk.
Change History (8)
- Priority changed from normal to lowest
- Severity changed from major to trivial
Note: See TracTickets for help on using tickets.