When a user tries to have a reset password email sent, it is never sent. That’s on the login screen AND from the backend by an administrator user. It appears to be blocked by Wordfence.

I have put WAF in Learning Mode, sending, and turning it back on normal again, but even during that mode, the emails weren’t sent.

When I deactivated WF, it seemed to work, eventually. Might have been some caching issues at first.

All I get is the following message at the administrator email account. Note that this is all on the same Bluehost shared hosting box. So WP did try to send it, WF did know there’s a reset attempt but it won’t let it go.

I’ve tried it with and without the WP SMTP Email plugin enabled

This email was sent from your website “xxxxxxx” by the Wordfence plugin at Friday 10th of May 2024 at 11:50:45 AM
The Wordfence administrative URL for this site is: https://xxxxxxxxxx/wp-admin/admin.php?page=Wordfence
Someone tried to recover the password for user with email address: xxxx@xxxxx.com
User IP: 99.99.99.99
User hostname: example.com
User location: xxx,xxx, Canada