#15267 closed defect (bug) (wontfix)
'password_reset_message' filter arguments
| Reported by: | arena | Owned by: | |
|---|---|---|---|
| Priority: | normal | Milestone: | |
| Component: | Version: | 3.1 | |
| Severity: | critical | Keywords: | |
| Cc: | Focuses: |
Description
as in filter
'retrieve_password_message' arguments allows to bypass the wp_mail function ($message, $key)
in filter 'password_reset_message' it is not the case.
in pluggable.php
the line
$message = apply_filters('password_reset_message', $message, $new_pass);
has to be
$message = apply_filters('password_reset_message', $message, $new_pass, $key);
thank you
Change History (2)
Note:
See TracTickets
for help on using tickets.
![(please configure the [header_logo] section in trac.ini)](/chrome/site/your_project_logo.png)
not applicable in 3.1