After login with Firefox to Wordpress website as non admin user, 3 cookies are set:
- wordpress_sec_... for path /wp-admin
- wordpress_sec_... for path /wp-content/plugins
Why are cookies 2-3 needed for non admin user?
According to answer here:
All logged in users use resources from wp-admin and plugins, not just admins. The cookies are for keeping track of the logged in user’s authorization to access each resource. If a visitor does not log in, no cookies are set at all by default. Themes or plugins may do so though.