WordPress.org

Ready to get started?Download WordPress

Forums

Theme My Login
BEWARE Security risk with this plugin (6 posts)

  1. iainmack
    Member
    Posted 3 years ago #

    This plugin made my WP dashboard available to all who visit. with the option to change my password.
    BEWARE

  2. ClaytonJames
    Member
    Posted 3 years ago #

    Can you be more specific? I'm currently using that plugin, and have not noticed any issues up to now. What should I watch out for?

  3. Jeff Farthing
    Member
    Plugin Author

    Posted 3 years ago #

    Yes, please. I would love to hear this...

  4. anindyaray
    Member
    Posted 3 years ago #

    I have just started using this plugin, its awesome, and didn't confront the issue mentioned above ....

    @iainmack - if you are not willing to allow members visit you dashboard then, you can use the plugin named "WP Hide Dashboard" and enable "Enable Themed Profiles" setting in Theme My login setting page.... hope this help your confusion

  5. Jeff Farthing
    Member
    Plugin Author

    Posted 3 years ago #

    I don't think he realizes that the "Dashboard" is already accessible by anybody. They just have to know how to get there. By default, TML has a "Dashbaord" link when a user is logged in, which can be changed/removed via the Custom User Links module.

  6. anindyaray
    Member
    Posted 3 years ago #

    Hope now his confusion is eradicated ...

Topic Closed

This topic has been closed to new replies.

About this Plugin

About this Topic