I also could not login until the plugin was disabled (moved to a sub directory).
I tried reinstalling the plugin and it bumped me off of my blog… until I deleted the AIOWP folder, then things worked again.
I have WordPress 4.2.3 running Twenty Ten theme.
Yes.
https://github.com/philipjohn/exploit-scanner-hashes/blob/master/hashes-4.1.php
From which you can create the file
/wwwroot/wp/wp-content/plugins/exploit-scanner/hashes.4.1.php
Then the scanner works much better.
Steve