[wp-trac] Re: [WordPress Trac] #5272: WordPress allows anonymous user to see slug for private post by guessing post number

WordPress Trac wp-trac at lists.automattic.com
Sun May 25 21:19:36 GMT 2008


#5272: WordPress allows anonymous user to see slug for private post by guessing
post number
-----------------------------------------------------+----------------------
 Reporter:  tzafrir                                  |        Owner:  pishmishy
     Type:  defect                                   |       Status:  assigned 
 Priority:  normal                                   |    Milestone:  2.6      
Component:  General                                  |      Version:  2.3.1    
 Severity:  major                                    |   Resolution:           
 Keywords:  has-patch canonical redirection private  |  
-----------------------------------------------------+----------------------
Comment (by tzafrir):

 Too bad - I can't see how this is not a major privacy issue.

 If we ever want to see WordPress used as a CMS for a major corporation, we
 can't have their secret keynote surprise open for the world to see.

-- 
Ticket URL: <http://trac.wordpress.org/ticket/5272#comment:6>
WordPress Trac <http://trac.wordpress.org/>
WordPress blogging software


More information about the wp-trac mailing list