today, two players loggin in my server and they can join in account ADMIN, NOT USE /login command, and can use ANY command from my server. They, told my this bug caused by, residence,factions,worldguard with any auth plugin.
Krazy Use online mode. Also, it's our policy to refuse help to people running offline or "cracked" servers in case you didn't know.