can login without password | ww.wp.xz.cn

Resolved willem67
(@willem67)

14 years, 4 months ago

I discovered that I can login to my site with any password as long I use the correct username. I don’t know how long this has been going on.

I did reset my password several times without result. I also emptied cache; removed password from my browser; my operating system, etc. But I can still login with any password.

This is very worrying.

Willem

Viewing 4 replies - 1 through 4 (of 4 total)

Moderator Ipstenu (Mika Epstein)
(@ipstenu)

🏳️‍🌈 Advisor and Activist

14 years, 4 months ago

Try a different browser.

Also what plugins are you running? I can’t repro this on a clean install.

Thread Starter willem67
(@willem67)

14 years, 4 months ago

I just solved it by looking into my plugins. When I deactivated ‘Absolutely Privacy’ the problem is over.

Bizarrely, I have had that plugin for a long time.

Conclusion: The security leak seems to be in ‘Absolutely Privacy’

What is the official method to report such a leak?

Moderator Ipstenu (Mika Epstein)
(@ipstenu)

🏳️‍🌈 Advisor and Activist

14 years, 4 months ago

Usually by doing what you did: http://ww.wp.xz.cn/tags/absolute-privacy?forum_id=10 lists other people having the same problem.

You can also email plugins[at]ww.wp.xz.cn to report it.

Eric Mann
(@ericmann)

14 years, 3 months ago

The plugin has been patched as of version 2.0.6 to fix this vulnerability.

Viewing 4 replies - 1 through 4 (of 4 total)

The topic ‘can login without password’ is closed to new replies.

Tags

4 replies
3 participants
Last reply from: Eric Mann
Last activity: 14 years, 3 months ago
Status: resolved

Topics

Topics with no replies

Non-support topics

Resolved topics

Unresolved topics

All topics