I’m having a weird issue in two sites. Users get their password reset with no authorization. They have to blank the password to recover the account.
I have checked many times with security experts for hacks or virus and the sites are clean but the issue persist.
All users get their password changed in random groups of 6 or 7 every day.
Only Admins do not have this issue.
Any help is very apreciated.