WordPress.org
Get WordPress

Make WordPress Core

Opened 7 years ago

Last modified 4 years ago

#37559 new defect (bug) (maybelater)

Password protected pages require the password only once

Reported by: ctienshi's profile ctienshi Owned by:
Milestone: Awaiting Review Priority: normal
Severity: normal Version: 4.5.3
Component: Security Keywords:
Focuses: Cc:

Description

after entering the password for a password protected page it does not ask for the password again to see the page after logging out of wordpress and logging in again. This could be a security vulnerability and a bug because the password for Wordpress and the password for the Password protected page are different.

Change History (2)

#3 @iandunn
4 years ago

  • Resolution set to maybelater

Switching from wontfix to maybelater, since that's more accurate.

xref: ​https://make.wordpress.org/core/2019/01/14/follow-up-on-recent-trac-bulk-edit/

Note: See TracTickets for help on using tickets.