Is there an security risk with using wp_signon function? October 2, 2022 by Tarik Billa You should first filter to check for valid user credentials wp_authenticate_username_password