do we know is it saved as hash of password in database? if it's saved in password plaintext format, this bug should be fixed asap.
do we know is it saved as hash of password in database?
if it's saved in password plaintext format, this bug should be fixed asap.