Username site bug vulnerabnility
-
The scenario is like this. In dashboard in User–>;under Profile Sections I have username for site and we call it: Asanas. I don’t want to show this username through site so I am using a Nick Name: ADM and as Display name publicly I am using my nick name: ADM. So when I post it only show the ADM as author and nothing Asanas, because its for my site, privately and people shouldn’t know it, because hackers can know my username. At this point we are ok. When I decide to install the plugin: Wp discuz and I am logged in as adm and If a post a comment or reply a comment as author/administrator it shows not only my nick name or display name but in inside () it shows also the username. This is not only a bug but something that hackers can steal my site or they can use brute force attacks.
- The topic ‘Username site bug vulnerabnility’ is closed to new replies.
