Forums

Possible Security Breach with WP 2.6? (3 posts)

  1. William Bowles
    Member
    Posted 3 years ago #

    Hi,
    Now I'm not sure what the problem is but I had a Firefox plugin installed called WordPress Helper when I checked into a blog (http://www.fair.org/blog/). Now I'm pretty certain I have NOT registered with the site but when I entered my username (Creative-i) and a password, it rejected the password but asked me to get a new password, so I did and it mailed me a new password!

    When I went back and used it, I found myself not at the Home page but IN the admin section! Only an administrator has access to this, so I'm not sure if it's the way they've got it setup or something to do with the plugin or simply a 'backdoor' if you happen to stumble on the right username.

    My initial reaction was that it was the plugin that had something to do with it but now I'm not sure (I've emailed Firefox and notified them that there maybe a problem with the plugin).

    Bill

  2. Every time you log into a blog, it takes you to the admin section. You just only have access to user parts of the site.

  3. William Bowles
    Member
    Posted 3 years ago #

    Is this a question? Yes, logging in takes me to the Dashboard.

Topic Closed

This topic has been closed to new replies.

About this Topic