Password Reset Completes Successfully for Unverified Users Despite Verification Error Message

Ticket for: User Verification
0
Password Reset Completes Successfully for Unverified Users Despite Verification Error Message 1
Michaela Kaulmann
Jun 02, 2026 05:45 PM 0 Answers
Member Since Jan 1970
Unsolved Solved Mark as Solved Mark as Unsolved
Subscribed Subscribe Not subscribe
Flag(0)

Issue Description

We have identified an inconsistency between the email verification workflow and the password reset process.

Steps to reproduce:

  1. A new user registers an account.
  2. The user receives the email verification link but does not click it.
  3. The user uses the "Forgot Password" functionality.
  4. After submitting the password reset form, the user receives the following error message:

    "ERROR: Please verify your email address first! Resend verification email."

  5. Despite this error message, the password reset process continues successfully.
  6. The user receives an email confirming that the password has been changed successfully.
  7. The user is still unable to log in and receives the same email verification error message.
  8. The user requests a new verification email, receives a new verification token, and verifies the account.
  9. After verification, the user can log in successfully using the newly set password.

Expected behavior:

If unverified users are not allowed to reset their password, the password reset process should be blocked completely and no password change should occur.

Alternatively, if password resets are allowed for unverified users, the error message should not indicate that the action was blocked.

Actual behavior:

The system displays an error message indicating that email verification is required, but the password reset is nevertheless completed successfully. This creates a confusing and inconsistent user experience.

Additional information:

  • MemberPress version: 1.12.15
  • User Verification version: 2.0.47
  • A new verification token is generated when the verification email is resent.
  • Login remains blocked until email verification is completed.
0 Subscribers
Submit Answer
Please login to submit answer.
0 Answers
Sort By: