atreyushoper

@jld142 did you update the resetpass-form.php?

Please disregard my first post.
here is the correct fix.
in class-theme-my-login.php line 369 i put the following code:

$pass_cookie_value='';
foreach($_COOKIE as $key=>$value){
  if(strncmp($key,"wp-postpass-",12)==0){
	$pass_cookie_value = $value;
	break;
  }
}
if($pass_cookie_value!=''){
	$_tkey = explode(":",$pass_cookie_value);
	if(isset($_REQUEST['rp_key'])){
		$_COOKIE[ $rp_cookie ] = $_tkey[0].":".$_REQUEST['rp_key'];
	}
}else{
	if(isset($_REQUEST['rp_key'])){
		$_COOKIE[ $rp_cookie ] = $_REQUEST['user_login'] . ":".$_REQUEST['rp_key'];
	}
}

Hi I forgot, that i also changed the resetpass-form.php in line 32:

form:
<input type="hidden" id="user_login" value="<?php echo esc_attr( $GLOBALS['rp_login'] ); ?>" autocomplete="off" />

to:
<input type="hidden" name="user_login" id="user_login" value="<?php echo esc_attr( $GLOBALS['rp_login'] ); ?>" autocomplete="off" />

I got the same issue i always redirected to /wp-login.php?action=lostpassword&error=expiredkey when click the reset password link in Forgot Password email.

I’m using WP 4.3.1 and TML 6.4.1 but i’m able to fix it.

/login/?action=rp and /resetpass will create different rp_cookie value so they are not matched that’s why it redirected to expiredkey error.

here is my fix.
in class-theme-my-login.php line 369 i put the following code:

$pass_cookie_value='';
					foreach($_COOKIE as $key=>$value){
					  if(strncmp($key,"wp-postpass-",12)){
						$pass_cookie_value = $value;
						break;
					  }
					}
					if($pass_cookie_value!=''){
						$_tkey = explode(":",$pass_cookie_value);
						if(isset($_REQUEST['rp_key'])){
							$_COOKIE[ $rp_cookie ] = $_tkey[0].":".$_REQUEST['rp_key'];
						}
					}

Please let me know if this working in your end.