LoginAddressState
Corex\Config\Security\LoginProtection\LoginAddressState · class · Config layer
Whether the default login address (/wp-login.php, and /wp-admin for a visitor) is hidden, decided once (spec 114, US-SAFE-11). The guard hid it only with protection on, hiding on and recovery off, while the Security Center printed the hiding setting alone: every fresh install read “Hidden” with the login form one request away. The guard, the Security Center and the Overview now all ask this.