Issue Description
We have identified an inconsistency between the email verification workflow and the password reset process.
Steps to reproduce:
- A new user registers an account.
- The user receives the email verification link but does not click it.
- The user uses the "Forgot Password" functionality.
-
After submitting the password reset form, the user receives the following error message:
"ERROR: Please verify your email address first! Resend verification email."
- Despite this error message, the password reset process continues successfully.
- The user receives an email confirming that the password has been changed successfully.
- The user is still unable to log in and receives the same email verification error message.
- The user requests a new verification email, receives a new verification token, and verifies the account.
- After verification, the user can log in successfully using the newly set password.
Expected behavior:
If unverified users are not allowed to reset their password, the password reset process should be blocked completely and no password change should occur.
Alternatively, if password resets are allowed for unverified users, the error message should not indicate that the action was blocked.
Actual behavior:
The system displays an error message indicating that email verification is required, but the password reset is nevertheless completed successfully. This creates a confusing and inconsistent user experience.
Additional information:
- MemberPress version: 1.12.15
- User Verification version: 2.0.47
- A new verification token is generated when the verification email is resent.
- Login remains blocked until email verification is completed.
