Frontend Reset Password

Changelog

1.3.3

30th January 2026 =
* [MOD] Strange, endless update loop (saying it was still 1.3.1)

1.3.2

30th January 2026 =
* [MOD] Page dropdown in settings now uses AJAX only (one request shared across all page fields); works when REST API is restricted

1.3.1

29th January 2026 =
* [FIX] Password reset form no longer shows raw special characters or regex in the page when special character requirement is enabled
* [FIX] Settings page “page dropdown” now works when Solid Security (or similar) blocks the public REST API

1.3.0 – 28th January 2026

• [NEW] New settings framework for our common brand. Search documentation and settings in WordPress admin
• [NEW] Full documentation site: https://docs.wpenhanced.com/frontend-reset-password/
• [NEW] Customizable special characters for password requirements. Now uses the full OWASP recommended character set by default, and allows admins to customize the allowed characters.
• [NEW] Added Settings link on the Plugins page for quick access to plugin settings
• [MOD] Removal of google font being loaded in CSS
• [MOD] Legacy Settings menu (Settings > Frontend Reset Password) now redirects to the new WP Enhanced settings page

1.2.5 – 23rd January 2026

• [MOD] Confirmed compatibility with WordPress 6.9

1.2.4 – 20th August 2025

• [NEW] New setting “Reset Link Text” – this will change the reset link text in the email from the URL to be what you add in the setting.
• [NEW] New Setting “Show Eye Icon on Password Fields” – if enabled it will allow the users to toggle the password visibility on the reset password.*
• [NEW] Added optional password format requirements. You can now choose to require at least one lowercase letter, one uppercase letter, one number, and/or one special character. Each requirement can be enabled individually.*
• [MOD] Modified the password reset form to display the requirements (character length and format requirements) in a list form and if they do not meet them, it will be red. When they meet the requirement it will go green.
• [THANKS] Special thanks to Colin Stearman (@britcoder) for his contributions and suggestions toward these enhancements.

1.2.3 – 16th April 2025

• Fixed bug when using WP 2FA
• Added {email} tag as option for custom email template
• Fix fatal error when there are issues sending email
• Fixed issue where translations were not loading from frontend-reset-password-LANG.mo

1.2.2 – 1st August 2023

• MOD: Lost Password Form – Accessibility

1.2.1 – 8th November 2022

• MOD: Updated branding to match WP Enhanced
• MOD: Updated “tested up to” so its not out of date anymore

1.2 – 13th July 2020

• [New Feature] Setting to change the email subject.
• [Change] Additional esc_html() calls added to frontend facing text.
• [Change] All translatable strings using __ have been converted to esc_html__().
• [Change] Updated POT file included.

1.1.91

• New Feature: Custom templates. Template files can now be included in your child theme folder. Create a new folder inside your child theme directory called somfrp-templates, and follow the same template folder/file structure as found in the plugin’s templates folder.
• Change: Now uses add_query_arg() when creating a reset password link, to improve compatibility
• Change: Username no longer included in reset password link, switched to using user ID
• Change: Changes made to lost_password_form.php template file
• Change: Tested up to WordPress 5.4

1.1.9

• Fix: Changed the way error messages are displayed to improve security. As such the plugin template files have changed, meaning any custom ones you have made will need to be updated to reflect the new changes.
• Change: Removed redundant <i> element from lost_password_form.php.

1.1.8

• New Feature: Custom templates. You can now override the form templates in your theme. Create a new folder inside your theme directory called somfrp-templates, and follow the same template folder/file structure as found in the plugin’s templates folder.

1.1.7

• Change: More HTML tags are now available to use in email messages, since the saved message is now included in the email raw, but still uses the wpautop() function to automatically add <p> tags

1.1.6

• Change: Replaced filter ‘retrieve_password_title’ with ‘somfrp_retrieve_password_title’ to prevent other plugins unintentionally overriding the email title
• Change: Replaced filter ‘retrieve_password_message’ with ‘somfrp_retrieve_password_message’ to prevent other plugins unintentionally overriding the email message
• Change: Set priority for lostpassword_url filter to 999
• Change: Moved plugin settings page from the Plugins section to the Settings section of the admin menu

1.1.5

• Change: Removed login check to allow resetting password when logged in
• Fix: Error output corrected for the invalid_key index

1.1.41

• Fix: Corrected bug with action displaying form

1.1.4

• Change: Changed to using “somfrp_action” parameter rather than “action” to avoid conflicts

1.1.3

• Change: Functions to override default lost password actions and filters have a higher priority number

1.1.2

• Change: Email sent confirmation text no longer shows the email address

1.1.1

• Fix: Custom text for the reset form now outputs HTML tags correctly

1.1

• New feature: Customise the name and email address that the reset password emails send from, rather than the default [email protected]
• New feature: Plugin now sends HTML formatted emails which can be fully customised in the settings
• New feature: Select custom pages to redirect to for the email sent successfully and password changed pages, rather than the reset password page handling everything

1.0.5

• Cleaned undefined index errors
• Change wp_mail() headers to better support some plugins/themes

1.0.4

• Fixed missing WP_Error object on password validation

1.0.3

• Plugin now translation ready

1.0.2

• Textdomain set for language file

1.0.1

• Textdomain fix

1.0

• Initial release