Hi, we are using a vanilla WP install and default login/password screen. The second password field is hidden, as per default, but as per your v7.2 you are now setting the value of the second field to the id of the first, thus the 2 don’t match and users have no way of passing the screen since the second field is hidden and non-editable:
// We take over the submit event, so fill this hiddne field.
const pass1 = document.querySelector( ‘#pass1’ );
const pass2 = document.querySelector( ‘#pass2’ );
pass2.setAttribute( ‘value’, pass1.getAttribute(‘id’) );
logSubmit( event, ‘reset_pw_form’, form );
This is your own code that clearly states it is filling the “hiddne” field, but it is filling it with the wrong value. And since it is hidden, users can do nothing about it. I made local changes to anr-captcha-class.php to change line 614 to pass2.setAttribute( ‘value’, pass1.getAttribute(‘value’) ); and the bug went away. I’ve since deactivated the plugin anyway, but I thought you might want to fix the issue for other users.