Serious bugs
-
There are two serious bugs with this plugin:
1. All new users are set with Administrator role instead of Subscriber as they should be per the General site settings for new users. This is a massive security problem and must be fixed promptly.
2. Option for Admin approval of new users does not work. Instead it acts the same as if the option was set to email confirmation. No email is sent to admin saying there is a new user needing approval. Form response message indicates check email instead of wait for admin.
The result of these bugs is anyone can sign up and be a full admin of the site. This renders the plugin completely useless as it’s a massive security hack!
- The topic ‘Serious bugs’ is closed to new replies.