Thank you for the contribution. It's now merged and released.
The user could still get the re-confirmation email through the Forget Password flow, so I added an extra check in the plug-in's user_confirm() to block any attempt from unauthorized users.
Thank you for the contribution. It's now merged and released.
The user could still get the re-confirmation email through the Forget Password flow, so I added an extra check in the plug-in's user_confirm() to block any attempt from unauthorized users.