LoginRegister - Invalid password is saved

[cryostar]

Hi all,

I used LoginRegister for my front-end authentication and I noticed that when you type in an invalid password on the profile form, the form can still be submitted thus saving my password. Here’s my repro steps:

1. Go to LoginRegister profile form

2. Type in an invalid password (like ‘b’)

3. Submit

I have enabled to include the current password on my profile form but that didn’t perform any validation.
 

Has anyone experienced this as well?