[wp-trac] [WordPress Trac] #52017: Customers getting reset password emails

WordPress Trac noreply at wordpress.org
Thu Dec 10 15:43:51 UTC 2020


#52017: Customers getting reset password emails
------------------------------------+-----------------------------
 Reporter:  hoshigetsu              |      Owner:  (none)
     Type:  defect (bug)            |     Status:  new
 Priority:  normal                  |  Milestone:  Awaiting Review
Component:  Login and Registration  |    Version:  5.6
 Severity:  major                   |   Keywords:
  Focuses:                          |
------------------------------------+-----------------------------
 It appears my customers have been getting reset password emails over the
 past month. I have security in place to prevent hackers and it does not
 appear that anyone logs in to change the customers passwords. I also do
 not see any suspicious logins from these accounts, and the passwords
 remain the same from the time they receive the emails (I have many of
 their passwords notated, and I am still able to login.)

 I have notifications when someone attempts a password reset, and I do not
 get emails with these customers resetting their passwords.

 This is happening to dozens of customers, with no explanation. No actual
 password resets, just emails saying they reset their password from
 WordPress.

-- 
Ticket URL: <https://core.trac.wordpress.org/ticket/52017>
WordPress Trac <https://core.trac.wordpress.org/>
WordPress publishing platform


More information about the wp-trac mailing list