[wp-trac] [WordPress Trac] #61481: Critical Bug in WordPress Affecting User Privacy (comment_class)

WordPress Trac noreply at wordpress.org
Sun Jun 23 03:45:28 UTC 2024


#61481: Critical Bug in WordPress Affecting User Privacy (comment_class)
--------------------------+------------------------------
 Reporter:  kamalireal    |       Owner:  (none)
     Type:  defect (bug)  |      Status:  new
 Priority:  normal        |   Milestone:  Awaiting Review
Component:  Users         |     Version:
 Severity:  major         |  Resolution:
 Keywords:                |     Focuses:
--------------------------+------------------------------

Comment (by samiamnot):

 Usernames in WordPress are not considered a security issue.


 > It has been stated in previous tickets, "leaking" of the username is not
 deemed a security issue by WordPress.org, as it's a conscious decision to
 use the username as the slug in the URL, If you don't like this default
 behavior, there are plugins in the repository which allow you to change
 the url format to your preferred layout.

 https://core.trac.wordpress.org/ticket/20235#comment:7

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/61481#comment:1>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list