Thread Starter
TIEro
(@tiero)
Found and worked around.
It turns out this is in the “SB Welcome Email Editor” plugin, not wp-members. My apologies for the confusion… too many little plugins to do each little thing!! 🙂
The issue you mentioned is the result of a change in WP 4.3 for the wp_new_user_notification() function.
WP-Members does not actually use this function, so any issues in 4.3 related to this would come from another plugin, as you already noted – I’m just adding info to this for later readers who stumble on this searching for the same or similar issue. Side note: there is a premium extension for the plugin that does use this, but it has been updated to accommodate changes in WP 4.3 – so if you are a user of the “WP-Members Override WP User Registration Email” extension, make sure you have the most recent version (0.3 or higher).
wp_new_user_notification() accepts two arguments. The first is the $user_id. The second was changed in WP 4.3. It used to be the plain text password. As of the final 4.3, it was changed to whether the admin and user should be notified (‘both’) or only the admin (‘admin’ or empty).
This function is a pluggable function, so it can be overridden with plugins. But if those plugins assume that the second argument that is being received is the password, the result will be an email that includes a password of “both”, “admin”, or an empty value; none of which will actually be the password.
The reason for the change is that the default process for a new user as of WP 4.3 is to send the user a link to create a password. In this way, the system no longer relies on sending a password through email (insecure) that the user is expected to change upon first login (lazy people don’t do it). It’s my opinion that it would have been nice to know more about this in advance (the official list does not yet mention it), but it is what it is.
It may take a little time for the issues related to this to be worked out because it really depends upon how engaged and active the plugin developer is for any plugin effected. As I mentioned in the beginning, WP-Members does not use this function and the extension that does has been updated.