Dan Wich (MailMechanic)

I found some old posts advocating putting that in for security reasons, so maybe that’s how it got there.

Well thanks for posting about what fixed it, I’ll add that to my troubleshooting steps.

When you mention “upgrading to WooCommerce”, do you mean that the problem started with 3.6.2? If not, it could be one of the general problems I list here.

Huh, I hadn’t heard of any email-sending problems with the update. It might be worth making sure they didn’t somehow get turned off during the upgrade (WooCommerce > Settings > Emails), and if not, installing the WP Mail Logging plugin to see whether WooCommerce is *trying* to send the emails.

Hey SiD, I think this should be fixed in the next update, you can see them fixing the code here: https://github.com/woocommerce/woocommerce/pull/23362

Any chance the orders’ status is stuck on Pending? That could happen if the payment isn’t fully processed, meaning the mail wouldn’t be sent.

If that’s not the case, you might want to double check that the email is enabled (with a purple check mark next to it) in the WooCommerce email settings. If it is, try installing the WP Mail Logging plugin to see if it’s even trying to send.

I haven’t tried it, but this code snippet is supposed to work for sending the New Order email for Pending orders. Or I think the WooCommerce Order Status Manager extension counts the Pending status as one it can send an email notification for.

Any chance that particular email (WooCommerce -> Settings -> Emails -> Reset password email -> Manage) is disabled? The reset password page misleadingly shows a success message even if it’s disabled.

I couldn’t tell whether you’ve tried logging the outgoing mail (you mentioned it showing as sent), but if you haven’t, try the WP Mail Logging plugin to see if it’s logged as even trying to send.

You might also want to check that the password reset email template hasn’t been customized and is up-to-date.

Do you have any caching plugins (or caching at the host level) active? If so, make sure they’re set to exclude URLs starting with /mio-account/ from caching.

Do you have any security or login plugins that might be attempting to “secure” that page?