// Post Status Notes

WP.org outage notice gets written into plugin user’s salt keys

Talk about edge cases!

On August 8, wordpress.org was down for a few hours after a Chicago data center outage. During the outage, a user of Salt Shaker reported the plugin replaced salt keys with an outage notice, leading to a WSOD on a customer’s site:

Probably the plugin just scraped and copied what was displayed at https://api.wordpress.org/secret-key/1.1/salt/.

wordpress.org support forum