https://wordpress.org/support/topic/cleartext-passwords-written-to-aiowps_audit_log/
Passwords stored in plain text. According to the bug reporter, and not disputed by the plugin developer, "This is a HUGE issue. Anyone, like a contractor, has access to the username and passwords of all other site admins."