Wordpress Core - All Known Versions - Cleartext Storage Of Wp_signups.activation_key __exclusive__ ★ Full

: Tools like WP Toolkit may flag this as a "never fixable" vulnerability; in such cases, you can ignore the specific warning as long as your site is hardened against SQL injection.

The wp_signups table (used for multisite network user registrations and some single-site email confirmation flows) stores the activation_key column as in the database. This key is used to verify a user’s email address or activate a new account. : Tools like WP Toolkit may flag this