I’d start with trying to debug where things are coming from on a copy / staging environment.
If you try to remove all / as many extensions as easily possible on the staging environment, does the issue persist?
If so, I’d still try to remove: ge_ge, Widget Module and studio_export somehow.
Check out this approach:
https://support.sugarcrm.com/knowledge_base/module_loader/manually_removing_module_loader_packages/
If the issue still persists, there must be sth. else and you probably need to check the code. Maybe this approach will get you somewhere:
- Create a DB dump
- Replicate the issue with a user
- Create another DB dump
- Use a diff tool to check which tables got updated
Then, you can check out the differences and try to identify which piece of code is doing that.
Look at this topic / post:
ut is Base64 encoded in the user table in the columns secion.
Try a service like: https://www.base64decode.org/ to decode it.
Overall a bit laborious, but it might give you a clue.
I assume, you’ve already looked into the log files and there is not good clue there? The two logs you need to know – SuiteCRM In-depth – pgorod's collection of articles on SuiteCRM