Users: Require confirmation for email changes made outside the profile screen - #13488

Open

techjewel wants to merge 9 commits into

WordPress:trunkfrom

techjewel:fix/57413-rest-email-change-confirmation

Commits on Sep 11, 2026

Users: Require confirmation for email changes made outside the profile screen.

dd32
authored and
techjewel
committed
3dc93e0
Users: Fix a fatal error when confirming an email change on Multisite.
techjewel
committed
ecf55a6
Users: Restore the profile screen behaviour lost in the refactor.
techjewel
committed
02b2c05
Users: Rename the confirmation processing function and fill in the @since tags.
techjewel
committed
4076b3f
Users: Harden the confirmation route and report rejected addresses over REST.
techjewel
committed
0ee2e92
Tests: Cover the email change confirmation functions directly.
techjewel
committed
40a0ae1
Tests: Assert on the confirmation email rather than on all outgoing mail.
techjewel
committed
bef3d09
Users: Do not treat a change of case as a change of address.
techjewel
committed
97be456
Users: Return null explicitly and update the PHPStan baselines.
techjewel
committed
5c7eaa1