[wp-trac] [WordPress Trac] #36131: User can register / relogin when loged in already.

WordPress Trac noreply at wordpress.org
Mon Mar 7 01:31:24 UTC 2016

#36131: User can register / relogin when loged in already.
 Reporter:  jashimili               |      Owner:
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:  4.4.2
 Severity:  normal                  |   Keywords:
  Focuses:                          |
 I don't know how no one didn't noticed this so far, or it's something to
 my WordPress installation specific.

 But when user is already logged in to the website, the same user can again
 go to wp-login.php page and try to login again, that's not so problematic,
 until the same user who is logged in try to register again.

 So if i login to my website as user1 and go to wp-login.php page again and
 try to register i can register my self as user2 even if i am logged in

 Is this a bug or just overlooked thing but for users who are already
 logged in, we should prevent access to wp-login.php page and functions on
 that page.

Ticket URL: <https://core.trac.wordpress.org/ticket/36131>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform

More information about the wp-trac mailing list