Anope before 2.0.15 does not prevent resetting the password of a suspended account. Upstream commit & issue: https://github.com/anope/anope/commit/2b7872139c40ea5b0ca96c1d6595b7d5f9fa60a5 https://github.com/anope/anope/issues/351