Akismet API keys are exposed by authentication method
Low
A
Automattic
Submitted None
Team Summary
Official summary from Automattic
We have switched to sending the Akismet API key as part of the request body by default.
Actions:
Reported by
aaroncarson
Report Details
Additional information and metadata
State
Closed
Substate
Resolved
Submitted
Weakness
Storing Passwords in a Recoverable Format