Replies: 0
I have found a problem already reported in this forum, but the topic got closed without a solution. The description of the problem is the same:
I am able to have users come to my site and request a password reset. An email sends to them and they are able to click the link and go to the password reset page. They can type and confirm their new password, but when they submit, they get the error “Sorry, the password reset key is expired.”.
Plugin version: 3.4.3
Wordpress version: 6.0
Checking the source code, it seems that in file “class-wp-members-pwd-reset.php”, on line 148
$user = check_password_reset_key( $key, $user_login );
The first visit (checking the activation key to enable the new password form) works ok. The following visit (after giving a new password and clicking submit) fails. I’ve checked the POST parameters and all are correctly set (passwords, activation_key, username…).
So I’m thinking the problem maybe that the activation_key could be only used once?
For now we have changed to use the legacy method until this problem is solved.
Thank you.