• Resolved Tano

    (@tanohex)


    Hello,

    As per this report here (2016), the plugin (v1.2.3) still stores the server address and login information in plain text, inside the database.

    This is a very dangerous practice, that led to a massive breach…

    Isn’t anything that can be done to patch this hole?
    I mean come on, 6 years have passed, can’t you just at least encode the password?

    Thanks!

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Password Sec Issue’ is closed to new replies.