jaripp

Yes, it uses the wp_mail() but now it forces sending address to be the WP admin email address, which in my case is not permitted sender when using Sendgrid or other SMTP API.

$admin_email = get_bloginfo( 'admin_email' );
$email_headers[] = 'From: WPVulnerability <' . $admin_email . '>';

Ok, I just hacked this with a simple js text replace for now.

function custom_add_js_to_admin() { ?>
    
    <style>
    #wp-admin-bar-my-sites-list .ab-sub-wrapper,
    #wp-admin-bar-my-sites-list .blavatar,
    #wp-admin-bar-my-sites-list .wp-admin-bar-arrow {
        display: none !important;
    }
    </style>
    <script>
    jQuery(document).ready(function($) {
        $('#wp-admin-bar-my-sites-list a.ab-item').each(function(){
            $(this).attr("href", $(this).attr('href').replace('wp-admin', '<?php echo get_site_option( 'whl_page', 'login' ); ?>'));
        });
    });
    </script>

<?php
}
add_action( 'admin_footer', 'custom_add_js_to_admin' );

Same multisite problem here.

I have 7 site with different domains, and because other sites in the network don’t share the main sites logged-in status (cookie), dashboard links to /wp-admin from the My Sites -submenu fails and redirects to 404.

This is the Finnish interpretation of the new guidelines:
https://www.kyberturvallisuuskeskus.fi/sites/default/files/media/file/Guidance_on_the_use_of_web_cookies_for_the_service_providers.pdf

It says: If an “Accept or allow all” selection is offered for granting consent for all cookies on the top level of the consent mechanism, a similar option to continue using the service only with essential cookies or to withdraw consent for non-essential cookies should also be offered.

Is it possible to add a “Accept necessary cookies” button to the banner in the current version?