Password Reset with Code for WordPress REST API Review - In-Depth Analysis
This plugin adds a password reset facility to the WordPress REST API using a code. Users can request a code via email and set a new password.
Performance Overview
User Rating
5/5 (based on 10+
reviews)
Active Installations
900+
Update Frequency
Below Average
It is calculated using the weighted average of same category
plugins.
Security Score
7.1 / 10
(High Risk)
It is calculated using the weighted average of all versions.
What It Does
This plugin adds a password reset facility to the WordPress REST API using a code. The process is a two-step process. First, the user requests a password reset, and a code is emailed to their registered email address. Second, the user enters the code when setting a new password, which is only set if the code is valid and has not expired.
It is also possible to check the validity of a code without resetting the password, enabling the possibility of setting the password by other means. The default settings use an 8-digit code consisting of numbers, upper and lower case letters, and special characters, with a lifespan of 15 minutes. A user can attempt to use or validate a code up to 3 times before it is automatically invalidated.
The plugin adds three new endpoints to the REST API for resetting passwords, setting new passwords, and validating codes. Each endpoint requires specific parameters to function correctly. Additionally, several WordPress filters have been added to customize the process, allowing for further customization as needed.
Comparing to Alternatives
Password Reset with Code for WordPress REST API is a specialized plugin focusing on password reset functionality via the REST API, with a strong emphasis on customization and developer hooks. It stands out among similar plugins for its detailed filter options and responsive support.
Strengths
- Highly customizable with many filters for developers
- Excellent and responsive author support
- Works reliably and as intended
- Allows extensive customization of email content and code parameters
- Well thought out and professionally developed
Weaknesses
- Had a known security vulnerability fixed only in recent update
- No pro version available for additional features
- Limited to REST API password reset functionality
- May require developer knowledge to fully utilize customization options
User Sentiment Analysis
With a perfect 5-star rating from all 10 reviewers, user feedback is overwhelmingly positive, highlighting the plugin's reliability and excellent support.
Positive highlights
- Good support - alex0311
- Awesome plugin with helpful author - andreslora09
- Amazing plugin with great functionality and helpful developer - ninievy
- Works perfectly with extensive customization filters - mrank
- Very well made with many developer hooks - Philip Sola
Weaknesses
- Previously had a high severity security vulnerability fixed recently
- No paid version limits access to advanced features
- Customization may be complex for non-developers
Who Should Use This?
Best for
Developers and site administrators who need a customizable password reset solution via the WordPress REST API and appreciate detailed control over the reset process and email content.
Not ideal for
Users looking for a simple out-of-the-box password reset plugin without needing developer customization or those concerned about recent past security vulnerabilities.
Pricing & Value
Free version includes
The free version includes full password reset functionality via REST API with extensive customization filters and developer hooks.
Final Verdict
Password Reset with Code for WordPress REST API is a highly rated plugin praised for its robust functionality, extensive customization options, and excellent developer support. It is particularly suited for users who need fine-grained control over password reset processes via the REST API.
While it had a significant security vulnerability that has been addressed, potential users should be aware of this history. The lack of a pro version means all features are available for free, but advanced users may need developer skills to fully benefit from the plugin. Overall, it is a strong choice for developers seeking a customizable password reset solution.
Other Notable Features
Here are a few other notable features of this free
Password Reset with Code for WordPress REST API plugin.
FAQ
Please report security bugs found in the source code of the bdvs-password-reset plugin through the Patchstack Vulnerability Disclosure Program. The Patchstack team will assist you with verification, CVE assignment, and notify the developers of this plugin.
Report a security vulnerability.
Contributors and developers
“Password Reset with Code for WordPress REST API”
is open source software. The following people have
contributed to this plugin.
