so i forgot my password to this wordpress blog. i clicked the forgotten password button. and wordpress sent me a new password. except i never entered my email address. so it was sent to yourname@yourdomain.com. someone had potential access to my account for about a minute. i changed the email address and reset my password. but i think this is a small but potential issue.
if you have a wordpress blog, remember to enter a legitimate email address.