tworonin

Hi.

I have version 2.5 and am still seeing the “WordPress tried to log in…” messages. Was that changed or is the “Fixed in next version (2.5)” post only referring to the 2nd bug?

Thanks.

I’d just like to echo the sentiments expressed here and add my support and encouragement for @radiok to continue development. I’d even be willing to contribute/donate in some way.

Thanks!

Ok, just so I am not misunderstanding this; @radiok you are stating that this vulnerability has nothing to do with your plugin and exists on a vanilla WP registration page? If this is so, shouldn’t this be addressed/fixed within WP itself?

I’m not trying to dispute what you’re saying, I just want to make sure I am not misreading/misinterpreting this issue.

Also, the sites which report this vulnerability in RPR say that it can be remedied by editing the source to properly sanitize the user input. Has anyone investigated and/or done this yet?

I hope this can be resolved as this plugin is fantastic and has served me very well.

Thanks!

Bump with same issue.

While Register Plus Redux export users (RPREU) is active, the custom verification email from Register Plus Redux (RPR) is NOT sent and instead the default WP new user email is sent. The conflict warning is also displayed in WP admin.

Once Register Plus Redux export users (RPREU) is deactivated, all works fine again and the warning disappears.