Possible Security Issue

  • Resolved mokummusic

    (@mokummusic)


    9 years, 7 months ago

    Hi there

    I’m not sure if this is peculiar to my installation, but with this plugin activated, Users who haven’t activated their account yet can still login.

    I noticed this just this morning, so it may be related to the latest Buddypress update.

    One of my new members has posted replies on a topic, yet their profile page says ‘recently not active’?! I checked into and they have not activated their account yet.

    I’ve now tested it with some new accounts and it seems:

    if you use your email address, not username, you can log right in after registering, without activating first via email.

    https://www.ads-software.com/plugins/wp-email-login/

Viewing 2 replies - 1 through 2 (of 2 total)
Viewing 2 replies - 1 through 2 (of 2 total)
  • The topic ‘Possible Security Issue’ is closed to new replies.