[wp-trac] [WordPress Trac] #47412: home pages of sites under maintenance can be displayed by adding /?wp-login.php to url

[WordPress Trac]

#47412: home pages of sites under maintenance can be displayed by adding /?wp-
login.php to url
--------------------------+----------------------
 Reporter:  sportair      |       Owner:  (none)
     Type:  defect (bug)  |      Status:  closed
 Priority:  normal        |   Milestone:
Component:  Security      |     Version:
 Severity:  normal        |  Resolution:  invalid
 Keywords:                |     Focuses:
--------------------------+----------------------
Changes (by dd32):

 * status:  new => closed
 * resolution:   => invalid
 * milestone:  Awaiting Review =>


Comment:

 Hi @sportair,

 WordPress doesn't include any Maintenance Mode functionality by default,
 so I'm assuming the sites in question are using a plugin.

 This trac isn't for reporting security issues, let alone plugin security
 issues.
 For details on how to report such issues, please see these handbooks:
 https://developer.wordpress.org/plugins/wordpress-org/plugin-security
 /reporting-plugin-security-issues/
 https://make.wordpress.org/core/handbook/testing/reporting-security-
 vulnerabilities/

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/47412#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform