WordPress.org

Forums

Theme My Login
Serious bug preventing password reset: user_activation_key is hashed as of WP3.7 (2 posts)

  1. tomdxw
    Member
    Posted 10 months ago #

    See lines 338-356 of wp-login.php for the new way to create user_activation_key for password resets.

    I believe this affects the multisite signup/activation process as well.

    Until this bug is fixed some users may find it impossible to reset their passwords (I think if you send a password reset email via /wp-login.php and then try to send one via TML's reset password page you can reproduce the bug and you'll be sent the hash of a token in your email rather than the token itself).

    https://wordpress.org/plugins/theme-my-login/

  2. hakpersson
    Member
    Posted 10 months ago #

    Second that. Just discovered the same mishap, affects all "password reset".

Reply

You must log in to post.

About this Plugin

  • Theme My Login
  • Frequently Asked Questions
  • Support Threads
  • Reviews

About this Topic

Tags

No tags yet.