Archived topic
WP username revealed in comment html
2 replies · Started by Arp on January 20, 2022
I had a bunch of failed login attempts on a new site and I was wondering how they figured out the username. I know that author slugs have them, but I have those archives disabled.
I did some more digging and I see that usernames are revealed in comment classes:
comment byuser comment-author-USERNAME bypostauthor odd alt depth-2
IS this a WP default or GP? And how can I stop this from happening?
FYI there are comments on one blog post. I made a new admin account and deleted the old one. Now in the comments if you look at #comment-5 the WP username is revealed in the classes.
This is highly insecure (not blaming y'all, just a general observation).
Hi there,
IS this a WP default or GP?
You can always determine this by activating a Twenty series WP theme to test.
The comment system is entirely handled by WP so I'm going to assume that this is a WP issue.
