Authentication - changing email does not trigger verification
Created by: muppeth
When creating new account, a verification email is sent. I've noticed that when you change email (so also a login name) it does not send any verification to that new email address before aproving the change. This could lead to security / provacy issue especially in the light of GDPR.