diff --git a/includes/core/class-account.php b/includes/core/class-account.php
index bf77e2b5..95caa02c 100644
--- a/includes/core/class-account.php
+++ b/includes/core/class-account.php
@@ -368,7 +368,7 @@ if ( ! class_exists( 'um\core\Account' ) ) {
 
 			if ( um_submitting_account_page() ) {
 
-				UM()->form()->post_form = $_POST;
+				UM()->form()->post_form = wp_unslash( $_POST );
 
 				/**
 				 * UM hook
diff --git a/includes/core/class-password.php b/includes/core/class-password.php
index 28a0a38b..dfd14cef 100644
--- a/includes/core/class-password.php
+++ b/includes/core/class-password.php
@@ -330,7 +330,7 @@ if ( ! class_exists( 'um\core\Password' ) ) {
 			}
 
 			if ( $this->is_reset_request() ) {
-				UM()->form()->post_form = $_POST;
+				UM()->form()->post_form = wp_unslash( $_POST );
 
 				if ( empty( UM()->form()->post_form['mode'] ) ) {
 					UM()->form()->post_form['mode'] = 'password';
@@ -382,7 +382,7 @@ if ( ! class_exists( 'um\core\Password' ) ) {
 			}
 
 			if ( $this->is_change_request() ) {
-				UM()->form()->post_form = $_POST;
+				UM()->form()->post_form = wp_unslash( $_POST );
 
 				/**
 				 * UM hook