I’m having a weird issue in two sites. Users get their password reset with no authorization. They have to blank the password to recover the account. I have checked many times with security experts for hacks or virus and the sites are clean but the issue persist. All users get their password changed in random groups of 6 or 7 every day. Only Admins do not have this issue. Any help is very apreciated.