We are hosting a number of WordPress sites for a customer - typically 3.3.1
We have a problem whereby when logging in to wp-admin any password will work. They have tried upgrading one of the instances to 3.4.1 but same problem exists.
Any ideas on how to fix this? We have locked things down in the interim.
Any thoughts welcome!