Someone got my password by requesting a new one
 

Hello
Someone got my password by using Lost Recovery Password.
He entered my email, then vBulletin sent a new password to my email, that hacker could get that password sent to my email and access my forum account.
How could he do that? how can I protect that in the future?
I'm pretty sure that my email hasn't been hacked.

Please help
Thanks