WP printing username and password

Hi,

I think those details will be only visible to the person who has that link and that’s you so I guess this is ok for now. Still, if you can check if you are getting logged-in after clicking that link or not then that might solve your issue.

Thanks

@prashantvatsh

thanks for your reply ??

we have asked as many friends as we can to go to public spots and register on our website to verify organically how many people can see username and password displayed publicly.

https://laundergroundradio.com/wordpress-security-issues/Screen%20Shot%202018-08-19%20at%207.23.34%20PM.png

ok, are you using BuddyPress?

no Gravity Forms but it exploits WordPress.

the screenshot you was directly from WordPress. Reading other blogs seems like WordPress is now limiting customizations.

Is that true?

Do you have any advice on how to prevent that information to be displayed publicly?

at least is there a way to mask the password?

That’s gravity form’s activation template. You have to customize it by overriding it in your child theme. Please see: https://gravitywiz.com/customizing-gravity-forms-user-registration-activation-page/

@prashantvatsh is correct here – that is handled by Gravity Forms.

It’s worth noting, however, that WordPress does not store passwords in plain text, so it will not be displayed to anyone else after this page. It is likely only displayed here as it has just been generated, but after this, there is no record of the password in plain text anywhere inside WordPress so there’s no possibility of it being shown to anyone else in the future.