Title: Possible Security Issue
Last modified: August 24, 2016

---

# Possible Security Issue

 *  Resolved [mokummusic](https://wordpress.org/support/users/mokummusic/)
 * (@mokummusic)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/possible-security-issue-2/)
 * Hi there
 * I’m not sure if this is peculiar to my installation, but with this plugin activated,
   Users who haven’t activated their account yet can still login.
 * I noticed this just this morning, so it may be related to the latest Buddypress
   update.
 * One of my new members has posted replies on a topic, yet their profile page says‘
   recently not active’?! I checked into and they have not activated their account
   yet.
 * I’ve now tested it with some new accounts and it seems:
 * if you use your email address, not username, you can log right in after registering,
   without activating first via email.
 * [https://wordpress.org/plugins/wp-email-login/](https://wordpress.org/plugins/wp-email-login/)

Viewing 2 replies - 1 through 2 (of 2 total)

 *  Thread Starter [mokummusic](https://wordpress.org/support/users/mokummusic/)
 * (@mokummusic)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/possible-security-issue-2/#post-6016400)
 * I’ve found a post from a couple of years ago, describing the same issue. It was
   apparently fixed in a Buddypress update.
 * [https://wordpress.org/support/topic/plugin-wp-email-login-this-plugin-allows-non-activated-users-to-login](https://wordpress.org/support/topic/plugin-wp-email-login-this-plugin-allows-non-activated-users-to-login)
 * I looked at the Email Login plugin php file and the latest version checks for
   user_status == 0, unlike when that thread was written.
 * So I guess this is something else?
 * Thanks..
    Neil
 *  Thread Starter [mokummusic](https://wordpress.org/support/users/mokummusic/)
 * (@mokummusic)
 * [11 years, 2 months ago](https://wordpress.org/support/topic/possible-security-issue-2/#post-6016445)
 * I’ve done a bit more testing and I was wrong. Email Login is not the problem..
   Sorry!

Viewing 2 replies - 1 through 2 (of 2 total)

The topic ‘Possible Security Issue’ is closed to new replies.

 * ![](https://s.w.org/plugins/geopattern-icon/wp-email-login.svg)
 * [Email Login](https://wordpress.org/plugins/wp-email-login/)
 * [Frequently Asked Questions](https://wordpress.org/plugins/wp-email-login/#faq)
 * [Support Threads](https://wordpress.org/support/plugin/wp-email-login/)
 * [Active Topics](https://wordpress.org/support/plugin/wp-email-login/active/)
 * [Unresolved Topics](https://wordpress.org/support/plugin/wp-email-login/unresolved/)
 * [Reviews](https://wordpress.org/support/plugin/wp-email-login/reviews/)

 * 2 replies
 * 1 participant
 * Last reply from: [mokummusic](https://wordpress.org/support/users/mokummusic/)
 * Last activity: [11 years, 2 months ago](https://wordpress.org/support/topic/possible-security-issue-2/#post-6016445)
 * Status: resolved