• Resolved Patrick

    (@hovida)


    Hi,

    I am a plugin developer, I fall so loving something up:

    WordPress stores various information, including in global variables. Problem here is that there credentials are used (for example, the database).

    Since you can access with plugins on these variables, this is a serious security leak.

    Not only theoretically but also practically a plugin can access the data and send this via e-mail!

Viewing 1 replies (of 1 total)
Viewing 1 replies (of 1 total)
  • The topic ‘Security-Warning’ is closed to new replies.