It's hard to document this issue or give steps to reproduce because the issues continue to change.

TLDR: The toast error and success messages are wrong about 80% of the time. Sometimes 5 show up, sometimes none show up. Sometimes they show the information of OTHER users. 

Some (not nearly all) of the issues that have come up:

• When users go to the wpForo login page for the first, they sometimes see a green toast message that says 'This username does not exist in the system.' But it was the first time they navigated to the URL (not a local caching issue).
• Other times, there is a red toast message that says 'Error: The password you entered for the email address [specific user's email] is incorrect. Lost Your Password?' However, the email shown is a different user's email, and it is showing for every single user attempting to log in to the site. The hyperlink also goes to the wordpress forgot email form instead of the wpforo.
• At other times, a green notification 'Email has been sent' shows, even if the form data was incorrect and did NOT send an email.
• Sometimes, a user enters incorrect information and there is NO state change (no toast, no error messages - it looks like nothing happened).
• Sometimes navigating to a new slug while unauthenticated (i.e. domain -> domain/sign-in) triggers different toast messages to show. Sometimes it doesn't.

I'm a bit at a loss of what to do here, as this isn't a case of one wrong notification that can be hidden or modified, nor is it one use with browser or caching issues.

This is very bad UX to not have input-level validation and seems difficult to override within the wpForo environment. I'm tempted to hide all of them with CSS, but because no other validation is built in, users will then be left with confusing lack of state changes and no way to know whether or not something worked.

Help? How do these work? Can I modify when they get triggered or their contents? What can I do to add input-level validation instead?