WordPress plugin TranslatePress stored admin password-reset links in a database table any visitor could read without logging ...