Without being able to put my finger on the root cause I can explain why it is possible so many Daily Security Digest emails are being send.
It’s because the check for scheduled email notifications is (by default) hooked to the WordPress init action.
That means EVERY (frontend or backend) request to the site can potentially send one (or more) scheduled email notification(s).
Now, it is possible to change the default behavior. Instead of performing the scheduled email notifications check on every page load you can offload it to WP Cron. You only need to add the line below to the wp-config.php file:
define('ITSEC_NOTIFY_USE_CRON', true);
This should considerably lower the number of Daily Security Digest emails send (even without fixing the root cause).
Fixing the root cause will probably require additional tracing/debugging in your env.
-
This reply was modified 2 years, 6 months ago by nlpro.