In Textpattern 4.5.7, the password-reset feature does not securely tether a hash to a user account.
textpattern textpattern 4.5.7