[wp-trac] [WordPress Trac] #34108: WordPress 4.3.1 password reset on user form submit

WordPress Trac noreply at wordpress.org
Thu Oct 1 12:55:21 UTC 2015


#34108: WordPress 4.3.1 password reset on user form submit
------------------------------+------------------------------
 Reporter:  LordSpackolatius  |       Owner:
     Type:  defect (bug)      |      Status:  new
 Priority:  normal            |   Milestone:  Awaiting Review
Component:  Users             |     Version:  4.3.1
 Severity:  normal            |  Resolution:
 Keywords:                    |     Focuses:  administration
------------------------------+------------------------------

Comment (by dikiy_forester):

 I was able to partly replicate this issue. In my case password wasn't
 changed, but each time after update profile I recieved "Notice of Password
 Change" email.

 The problem is in web browser's autofill password option. So browser
 filled the `pass1` profile form field with my current password. Changing
 browser or disabling "autofill password" option resolves the issue.

 My testing installation:

 1. WordPress 4.3.2-alpha
 2. Theme 2015
 3. no plugins activated
 4. Google Chromium ver. 45.0.2454.101

 Looks like it's browser issue, but anyway WordPress should prevent such
 behaviour.

--
Ticket URL: <https://core.trac.wordpress.org/ticket/34108#comment:2>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list