There are two separate issues here: security and a malformed password reset link.
As you did not request the password reset, let’s ensure that the latter problem exists.
Go to your WordPress login page and click the “Forgot Password” (“Lupa sandi Anda?”) link to request a new password.
Does the problem exist in the password-reset email you received?
(My theory here is that a badly-written hacking script may be automatically generating the password resets and mucking up the link, so the link requested from the WordPress login page should be fine.)
Standing by for your feedback and the next steps.
georgen appiah, you are not answered my question.
the link not clickable because the link not include my domain https://kursusdigital.id/ . How to solve it?
please read question carefully, before answer
I asked you to do a simple test so I can have a better understanding of what may be causing this to know which direction to turn for answers. This is a normal thing in troubleshooting technical problems. I even included my “theory” for asking you to do this.
If you’re unwilling or unable to work along with me, then, I’m sorry, but do not have any magic bullet for you.
If you need my help, please do as I’ve asked you to.
Alternatively, if you’re absolutely certain the problem does indeed exist and won’t do this 5-second test to confirm it first, then please follow the standard WordPress troubleshooting procedure: disable all your plugins, switch to one of the default themes, and then — once again — go to the login page to send a new password reset request to see if this time you get the correct password reset URL with your domain or not.
If the NEW email contains the correct clickable URL (after doing the above), then you know either your theme or one of your plugins is causing this. You can then turn them on one after the other, testing each time, until the problem appears again. The last thing you turned on that brought back the problem should be the culprit.
Standing by to help, if you need my assistance.
Good luck!
Current Condition
/wp-login.php?action=rp&key=lYR2MYVTfDudZ165e5BI&login=jamur.bayangan
After “visit the following address:” the link not clickable because the link not include my domain https://kursusdigital.id/ . How to solve it?
It Should be like this:
https://kursusdigital.id/wp-login.php?action=rp&key=lYR2MYVTfDudZ165e5BI&login=jamur.bayangan
Those who can answer please help, for those who don’t understand, please don’t answer.
screenshot: https://prnt.sc/C36_urFyiNJX
all of plugin deactivated