WordPress emailing erroneous 'Your Password Has Been Reset' Emails

  • Resolved Patrick I

    (@pat-inhoer)


    9 years, 6 months ago

    Hi,

    After updating to 4.3, members of our website have been getting this email from ‘[email protected]’:

    This notice confirms that your password was changed on *sitename*.

    If you did not change your password, please contact the Site Administrator at
    *site email address*

    This email has been sent to *subscriber*

    Regards,

    Some of our members are getting multiples of this email.

    Ideas?

    – patrick

Viewing 6 replies - 1 through 6 (of 6 total)

  • I am getting these too. Already have numerous users emailing me this morning. I administer 120 WP sites, with hundreds of users. Concerning as I immediately started running security scans. It is triggered by the WP 4.3 update

    Thread Starter Patrick I

    (@pat-inhoer)

    And to be clear… the passwords have not actually been reset.

    It will keep sending the same notice over and over again every time you login to the same site. This is definitely a problem.

    Thread Starter Patrick I

    (@pat-inhoer)

    Ah – that’s what kicks off those emails… logging in. Thanks. I’ve now done some troubleshooting.

    I’m using DAP to manage my members. It’s seems if I log in via the WP login box, no email gets sent. If I log in via the DAP shortcode, an email gets sent every time… even if DAP LiveLinks is the only plug-in active.

    I’ve opened up a case with DAP, we’ll see what they say.

    Thread Starter Patrick I

    (@pat-inhoer)

    And here’s a thread detailing precisely whats wrong with DAP LiveLinks:

    https://www.ads-software.com/support/topic/wp-update-triggered-password-email-for-all-users

    Thread Starter Patrick I

    (@pat-inhoer)

    For me, this was a DAP plug-in problem. They’ve issued a fix (see my previous post). If you’re having this problem be sure to start a ticket with them and they’ll help you get sorted.

Viewing 6 replies - 1 through 6 (of 6 total)
  • The topic ‘WordPress emailing erroneous 'Your Password Has Been Reset' Emails’ is closed to new replies.