I don’t have a cache plugin but I deactivated as many plugins as I could and my cache level in setting is off (level 0). The only ones I kept active were yours, bluehost and siteorigin page builder + widgets.
Does this mean you can login even with my name/password?