( WordPress)
I have created over 100 users with the subscriber role, including User X and User Y.
I also have 3 administrators, with one designated as the super admin.
Expected Behavior:
User X and User Y, both with the subscriber role, should only have limited access when they log in.
The super admin should have higher privileges, limited to one active session at a time, and require 2FA for added security.
Issue When Using Persistent Login Plugin:
When I activate the WordPress Persistent Login plugin, User X and User Y sometimes randomly log in with super admin access rather than their intended subscriber-level access.
This issue occurs inconsistently and doesn’t affect all subscribers every time. Even though the super admin is restricted to a single session and requires 2FA, the login sessions still appear to get mixed up.
Temporary Solution:
When I deactivate the WordPress Persistent Login plugin, the issue disappears, and users like User X and User Y only have subscriber-level access, as expected.
However, when I reactivate the plugin, the session mix-up issue reappears.