Quantcast
Channel: WordPress.org Forums » [WP Mail SMTP by WPForms - The Most Popular SMTP and Email Log Plugin] Support
Viewing all articles
Browse latest Browse all 5163

Endymion00 on "[Plugin: WP Mail SMTP] Shocking security vunerability"

$
0
0

Even after changing the input to password on line 305, I could still see the password if I Inspected Element on the input in the Value. So I ended up removing the php outputting of the password as well with a note to enter it each time when making changes. Like so:

<td><input name="smtp_pass" type="password" id="smtp_pass" value="" size="40" class="code" /> Enter Password For Every Change</td>

Here's hoping the developer encrypts it in the database and stops displaying it on the page.


Viewing all articles
Browse latest Browse all 5163

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>