I’ve recently been alerted that the reset password page on my site is broken. Two issues:
1. There is a new empty input filed next to the pass1 (New Password) field. The field is labelled pass1-text and shows the user’s entered password in plain text as they type it.
Where is this pass1-text field coming from? I don’t see it in wp-login.php
2. The pass2 field (Confirm Password) only accepts 1 character and overwrites anything that was previously entered into pass1. Not sure why this is happening as the input size is 20.
There are no js errors, but chrome is throwing a warning about duplicate user_login DOM element.
Hello Jonah, Yeah, sounds like something no good is going on and you may want to beef up security a little. I’d remove the page until you can find out what’s going on.
Note: There are security type plugins out there that can help some.
Do you have have the latest WP installed? Have you set the PremiumPress> CONFIGURATION > PAGE & BUTTON LINKS > LOST PASSWORD PAGE setting?
Start your new website today!