Ability to unknowingly send verification email multiple times

We ran across a situation where multiple verification emails are being sent to users. We couldn’t understand why this was happening, and after some trial and error and troubleshooting we found out what exactly was happening.

We want to bring this to your attention so that you can hopefully offer a solution, or provide a fix in your plugin so that this can’t happen.

Here is how to replicate the problem. All of this is from the Admin (backend) area of WP. Find a user account that is unverified, and click the resend verification link. This sends out one new verification email to the user, and reloads the Users page.

Now, if you click on any of the sortable columns on the Users page, for example click on Registered to sort it by registration date, it will send another verification email. When you first click on the resend verification link, that URL is then used as the URL for all of the active links for sortable columns (Username, Email, Registered, last Login, # Logins).

Not sure if this is a bug in your plugin, or a wordpress bug, or both, but is there a way to prevent this? After clicking on the link to resend verification, the Users page loads to the default state where users are listed by their userID in the database, and like us, you might click on the Registered column to sort by sign-up date to find the most recent users added to the site. To find the most recently added user as the first user displayed, you would have to click on the Registered column heading <span style=”text-decoration: underline;”>twice</span>, which then sends out the verification email two more times.