CRED is attaching Media to emails if the media ID matches the “?_target=” value of User Form success messages

Symptoms

If an Image (Media attachment) ID matches exactly the ?_target= parameter value of CRED form success messages, then CRED email notification for this form will include the Image (Media Attachment) – even if this media is completely non-related to the form or posts/users which are created (or edited) with CRED.

Workaround

Currently, there is no fix for this issue.

This issue will be resolved in a future release of CRED.