Users get logged into other users if you’re logged in as them!

  • Resolved colfetski

    (@colfetski)


    1 year ago

    Awesome, and useful little plugin guys. Thank you.

    But, I’m not sure if you’re aware of this bug. We call it the “Login Lucky Dip”.

    If you are logged in as another user, and that user comes along and tries to log in too, they get logged into some other random user’s account.

    This is a very concerning phenomenon, especially when that other user may have all kinds of personal info in there that you would not want someone else to have access to.

    You may wish to test this and resolve the issue.

Viewing 1 replies (of 1 total)
  • Plugin Author Yiannis Christodoulou

    (@yiannistaos)

    Hi @colfetski,

    Thank you for your kind words.

    As the user is already logged in, how did he try to login again? Maybe there is a conflict with another plugin that handles the login process in a different way than WordPress core?

Viewing 1 replies (of 1 total)
  • The topic ‘Users get logged into other users if you’re logged in as them!’ is closed to new replies.