Issue: new users can login without verification of emails
Hi,
I found out that new users can login using the same username/password, right after registration, without needing to verify his/her email. That is an abnormal behavior. New users should not be able to log in without first verifying their emails. That means they can register with someone else's email or a fake email and log in. I can confirm that "AppThemes Confirm Email" plugin has been activated. Is it an issue with the theme? or the plugin? Could you please kindly help me with this issue? Thank you.
Note: Those users' roles are automatically assigned "None". After verification, their roles get switched to "Contributor".
Reply With Quote
You must be an AppThemes customer and logged in to view this response.