Users can login to Website from wp-admin prior to confirmation email
I have a wordpress website that has an account sign-up/login system.
When a user creates an account from the website’s signup page (not the wp-admin page), he has to confirm the email link (in his mail inbox) prior to being able to login.
However, if the user goes to mywebsite.com/wp-admin, he is able to login and access website’s resources as a logged in user without having to confirm his email.
I suppose disabling access to wp-admin is not an option as it will create issues since wp-admin is required for proper functioning of the website.
Any suggestions would be really appreciated.