March 8, 2018 at 23:12
#191006
Participant
Hi Laura,
This is a Kleo bug, not a plugin conflict.
The 403 error is caused by a bug in Kleo. Kleo’s calling
COPY CODE
check_ajax_referer('kleo-ajax-login-nonce', 'security');
without ever sending the nonce in the variable called 'security' as they're expecting.
They're only POSTing these parameters:
Form data
action: kleo_lost_password
user_login:
demo
Kleo should also be registering their nonce and adding it to the POST as ‘security: $the_nonce’.
Can you pls provide a patch so this works?