Password reset & Pa...
 
Notifications
Clear all

wpForo 1.x.x [Closed] Password reset & Password set

2 Posts
2 Users
0 Reactions
822 Views
Posts: 1
Topic starter
(@ugly101)
New Member
Joined: 5 years ago

Password set & Password Reset both stall when you first sign up!! this also keeps users from signing up & having their accounts active in some cases!! since no matter how many times you set the Password it doesn't allow you to log in!!

 

There is also a Password injection issue on the Page if you keep the page open the way it is we showed this on our twitter twitter.com/keebu someone can sit there & inject code into the Password reset & can get Password & eventually access to users accounts!! sorry guys i had to jump on a PC that didn't have access to my account or twitter to Post the image here!! ❤️  you guys need to add the twitter Party emjois we have on our twitter tweets!! @keebu

1 Reply
Posts: 1602
(@anonymous20)
Noble Member
Joined: 9 years ago

Registrations and logins (including password reset) are NOT handled by wpForo but from Wordpress script.

wpForo just provides a "form" for it.