WordPress/WooCommerce BUG: 404 not working for /my-account/lost-password/* links

think maybe i found a bug present in a lot of websites that use the woocommerce plugin lost-password form. I cant understand if its a base plugin problem or a configuration mistake.

bug info:

urls like this:

1)*/my-account/lost-password/whatever

2)**/my-account/lost-password/asdasdasd/noaseduah

3)***/my-account/lost-password/inffast/lib

or on real websites like:

4)https://themes.woo.com/storefront/my-account/lost-password/asdasdasd/

5)https://demo.anarieldesign.com/fuel/my-account/lost-password/whynot404/

always load the /my-account/lost-password/ page instead of throwing the 404 error page(so the browser link is like */my-account/lost-password/whatever but instead of the error 404 page you see the */my-account/lost-password/ page).

additional infos: It started happening from late december 2023 after an update of the plugin, i noticed it cause google search console started reporting not existing urls like the ones i wrote as an example before in the noindex excluded pages section(likely it keep the noindex but i have on google search console like 1000 not existing urls in the indexing problems section caused by that bugs).

temporary solution: could be a .htaccess with a rule like this

RewriteRule ^my-account/lost-password/[a-zA-Z]+/ - [L,R=404]

but i believe that there should be a way to fix it permanently by finding what cause this to happen just for this directory.

If you know some way to fix it please let me know, i couldnt find the cause making it happen just for the lost-password link. Thanks in advance

• This topic was modified 9 months, 2 weeks ago by lorenzowebmaster. Reason: fixed suggested fix