Latest update broke theme

Not only it breaks the theme, it also allows all the spammer to sign up!

Spammers can sign up just as easy, if not easier, using wp-login.php. Old versions of the plugin can be found at the bottom of this page: https://www.ads-software.com/plugins/theme-my-login/advanced/

After I reverted back to the older version, the spam stopped.

Looks like I haven’t updated it for a while. When I downloaded different versions backward, every one of the 7* version broke the theme. Only when I used 6.4.17 then the theme works. I guess I need to stick with that version.

Do you have the Security module active with wp-login.php blocked?

Latest version broke my WP admin login also.
I downgraded to 7.0.9 and my site started working again.

Hi Jeff, not sure what Security module you are referring to? I haven’t changed anything besides upgrade.

When you view the TML settings page, under the Modules section, one of them is Security. Is that checked?

In the 6.4.17 version, it is not checked.

So, then, most likely, your spam users are coming from wp-login.php.

After checking it seems 7.* was removing the reCaptcha checkbox. I have added it back. Hope the spam will stop.

My issue is not much the spam users. My issue was that 7.* versions are messing up the theme.