Security Alert: 26 BuddyDev accounts compromized in brute force attack.

BuddyDev

Search

BuddyPress User Badges – Editing profiles to add custom badge triggers PW reset

Tagged: ,

  • Participant
    Level: Initiated
    Posts: 1
    Kristy Dalton on May 27, 2022 at 2:09 pm #45109

    I’ve seen this happen over the past 2 years on 3 separate websites and can’t figure out how to fix it. When the admin edits a user profile for any other reason, it doesn’t trigger a password reset email to the user. However, when the admin edits a user profile to check the box for a custom badge, the user is sent the WordPress password reset email.

    Anyone else run into this or know a fix?

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 27, 2022 at 5:54 pm #45115

    Hi Kristy,
    Welcome to BuddyDev support forums.
    Thank you for using the plugin.

    I just checked the code and I can assure you that the plugin can not cause the password reset email.

    You most probably have something else causing it. If you still believe that this plugin caused it, Please help me with the steps to re-produce it.

    Thank you
    Brajesh

  • Participant
    Level: Initiated
    Posts: 1
    Kristy Dalton on May 30, 2022 at 4:37 am #45122

    Hi, Brajesh – Thanks for your response. We will work on disabling other plugins to see if there is a conflict.

  • Keymaster
    (BuddyDev Team)
    Posts: 24706
    Brajesh Singh on May 30, 2022 at 11:52 am #45133

    Thank you. I am looking forward to your feedback.

You must be logged in to reply to this topic.

This topic is: not resolved