WS-2019-0423

In Automattic/wp-calypso, versions desktop-1.3.0-alpha till desktop/4.1.0, the main page does not disable password autocomplete. An attacker with access to the browser instance and local system credentials can steal the credentials...