Hey Bricks Team,
I’ve been experiencing an issue on my website since migrating to Bricks in July 2026, and I’ve finally been able to pinpoint the issue (using help from Claude).
When we register a new user on our website, Wordpress sends them an email with a link such as: https://www.xlrsecurity.com/wp-login.php?login=Ace%20AV%20Networking&key=8H2I4ov8xoHnkjvFlb8G&action=rp
The link works, and the user is able to enter a new password then click “Save Password”. However, at this step, the form posts to wp-login.php?action=resetpass however this action is BLOCKED by Bricks due to an unrecognized action and the user’s password is never saved.
Then, they try to login and are confused because the login form tells them incorrect username or password. They may think they typed the password incorrectly, or perhaps that we may have registered them using the wrong email. Either way, it’s not a good experience for them.
Here’s my setup:
- Bricks 2.4.3, WooCommerce 11.2.1, WordPress 7.1.3
- WordPress auth URL behavior = Custom (/my-account/), no custom reset password page.
Suggested fix: let resetpass through alongside rp, or only apply the redirect to GET requests. (by Claude)
Thanks for looking into this issue. I’m probably in the minority of users since we register our users manually as we’re a B2B site and we have a customer URL for login. Hopefully this bug report can help at least one other website from experiencing the same issue.
Best regards,
Jaeden