A very usefull plug-in, but it has a flaw...
When user logs in and is asked to change the password, he/she can simply click the SAVE button without entering a new password. The password entered during registration remains valid and the user can use it for further log-ins without a problem.