All-In-One Security plugin exposes admin passwords

Started by ergophobe, July 12, 2023, 09:50:58 PM

Previous topic - Next topic

ergophobe

https://wordpress.org/support/topic/cleartext-passwords-written-to-aiowps_audit_log/

Passwords stored in plain text. According to the bug reporter, and not disputed by the plugin developer, "This is a HUGE issue. Anyone, like a contractor, has access to the username and passwords of all other site admins."