haveIBeenPwned plugin throws on sign in

I don't think this is intended behavior? It should only work on sign up / password reset / password update?

This is the error message: The password you entered has been compromised. Please choose a different password.

Seems to only happen when the password is shorter than the minimum set in the config, otherwise it throws the expected invalid email or password error
Was this page helpful?