Looks like the issue crept back in.
Several of my sites are not unable to be logged into. Not a good plan to change settings without my permission.
What is *your* work around for this issue?
NOTE – I don’t have the custom login turned on. The recent update turned on blocking direct access to wp-login.php as well as domain.com/wp-admin – both return 404 errors.
