[wp-trac] [WordPress Trac] #53373: Reset password process reveals if an email address exists in the database

WordPress Trac noreply at wordpress.org
Wed Jun 9 21:15:17 UTC 2021


#53373: Reset password process reveals if an email address exists in the database
------------------------------------+-----------------------------
 Reporter:  henry.wright            |      Owner:  (none)
     Type:  enhancement             |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:
 Severity:  normal                  |   Keywords:
  Focuses:                          |
------------------------------------+-----------------------------
 If an email address doesn't exist, this message is given when a password
 reset is requested:

 > Error: There is no account with that username or email address.

 This, although debatable, isn't good practice.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/53373>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list