Password Stored in Plain Text in wp_options

Replies: 0

Hi,

After going through a DB export I noticed the wp_mail_smtp option stores our WP Admin username and password in plain text. This is in the serialized array with autotls, host, port, encryption, user, pass, and auth.

I am using the Gmail API method so I don’t see why this needs to be saved in the database and why it’s saved in plain text. This is a major security concern as anyone who grabs a db export has the admin login right there.

Please advise.

Thanks,
Brian