Security problem

  • Resolved msmithers

    (@msmithers)


    7 years, 5 months ago

    Hi,
    Today I discovered Open Graph MetaBox is exposing the WordPress login username in the tags, even though the WordPress user “Display name publicly as” is set to something other than the username. For example in the tags, there is:
    “@type”:”Person”,”name”:”<Name from WP setting Display Name publicly as>”,”url”:”https://<domain.name>/author/<username>/&#8221;
    I do not wish to expose the author URL and I also have a plugin installed to disable author pages and urls. Please remove the URL from Open Graph MetaBox or provide a setting to remove it!!
    Thanks,
    Michael

    • This topic was modified 7 years, 5 months ago by msmithers.
Viewing 2 replies - 1 through 2 (of 2 total)
  • Plugin Author nielsvanrenselaar

    (@nielsvanrenselaar)

    Hi,

    This is not really a security issue, as we are requesting the default WordPress author page to provide the appropiate link for Open Graph Metatag which should exists by default anyway.

    but I understand your concern, and will look into fixing this in a future version. But currently development is on low priority, since this is a hobby project.

    Plugin Author nielsvanrenselaar

    (@nielsvanrenselaar)

    @msmithers

    I’ve looked deeper into your problem, and we do not add the author meta data in this plugin. So it’s probably added by another plugin.

Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Security problem’ is closed to new replies.