SEO plugin publishes my username/password

#809169
  • Resolved Peter Toth

    1 year, 5 months ago

    Rank Math free

    On “Titles & Meta” / “Social Meta” page when clicking into “Facebook secret” or “Twitter Username” fields, they take over the relevant values (both at the same time) from Chrome’s built-in password manager.
    I navigated away from the page, did another change and saved.

    Weeks later I realized it did save the username and password too and also expressed it in the search meta of the home page.
    Running test on “https://search.google.com/test/rich-results&#8221; revealed that the main site’s Sitelinks Searchbox showed in section “SameAs”: “https://twitter.com/<my site’s admin login name redacted>”.

    I finally located the place where it was stored. Anytime I cleared it, and my admin password from the “Facebook Secret” field, it kept coming back. After quite a few attempts, I finally managed to save the page without those information.
    I hope my password was not out in the wild like my username was.

    I assume name/id/class of those two fields on the form need to be changed so the password manager does not find them.

Viewing 1 replies (of 1 total)
  • Jeremy

    1 year, 5 months ago

    Hello,

    Thank you so much for getting in touch.

    We advice you to change your WordPress admin password since you mentioned it was exposed on the page source.

    Back to the main concern, unfortunately, we can’t control how password managers interact with text fields, as they often autofill any text input. To prevent this, please double-check and clear any autofilled information in the “Facebook Secret” and “Twitter Username” fields before saving your settings. We recommend managing your password manager settings to avoid this issue in the future.

    Looking forward to helping you.

    RankBot

    1 year, 4 months ago

    Hello,

    Since we did not hear back from you for 15 days, we are assuming that you found the solution. We are closing this support ticket.

    If you still need assistance or any other help, please feel free to open a new support ticket, and we will be more than happy to assist.

    Thank you.

Viewing 1 replies (of 1 total)

The ticket ‘SEO plugin publishes my username/password’ is closed to new replies.