[wp-trac] [WordPress Trac] #48856: Administration Email Verification allows users to update main admin email address

WordPress Trac noreply at wordpress.org
Mon Dec 2 23:39:00 UTC 2019


#48856: Administration Email Verification allows users to update main admin email
address
-----------------------------+------------------------------
 Reporter:  bublitzcreative  |       Owner:  (none)
     Type:  defect (bug)     |      Status:  new
 Priority:  normal           |   Milestone:  Awaiting Review
Component:  Administration   |     Version:  5.3
 Severity:  major            |  Resolution:
 Keywords:  close            |     Focuses:
-----------------------------+------------------------------
Changes (by knutsp):

 * keywords:   => close


Comment:

 Hello @bublitzcreative

 Welcome to Trac and thanks for the ticket!

 Beware that any administrator can do and change anything, including edit
 other users of any role. This has nothing to do with "Administration Email
 Verification", which is just a warning pointing to the site email set in
 General Options - not linked to any user.

 If those capabilites are undesired - do not appoint them Administrators.
 If you want more fine grained roles and capabilities, there are plugins
 for that.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/48856#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list