Shutterstock - Login Patched

Even if the exploit didn’t reveal plaintext passwords, it’s best practice.