• Resolved DonQuicky

    (@donquicky)


    I did update the rights of an existing user to admin logged in as admin in the backend. I received the following warning by my WordFence:

    Critical Problems:

    * An admin user with the username XXXXX was created outside of WordPress.

    This seems to be a bug/false warning.

    Version of WordFence: 7.1.16
    Version of WordPress: 4.9.8

    • This topic was modified 7 years, 6 months ago by DonQuicky.
Viewing 6 replies - 1 through 6 (of 6 total)
  • Hi @donquicky,
    This can happen if the user was created before Wordfence was installed or while Wordfence was deactivated. Could that have been the case here?

    Thread Starter DonQuicky

    (@donquicky)

    Hi @wfasa,

    Unfortunately this is not the case. Wordfence was installed and active upon modifying the user.

    Is it a WordPress multisite?

    Thread Starter DonQuicky

    (@donquicky)

    Nope, no multisite. The only “complex” thing used on my site is the use of WPML.

    Hi again @donquicky,

    I tested just now to make sure, creating a user and then making it an admin doesn’t generate a warning.

    We hook in to the WordPress core user creation functions to register when a user is created via WordPress admin, so that must mean that something in your site affects core WordPress functionality in a way that makes it impossible for us to detect when a user is created via WordPress admin. I haven’t heard this issue reported for WPML before so I don’t think that’s likely to be it. Typically it would be a plugin related to custom roles or membership that might cause it.

    Thread Starter DonQuicky

    (@donquicky)

    Hi @wfasa,

    In that case it could be Members plugin related, I will monitor this issue, but while upgrade an existing user to admin is not a daily task 🙂 I will let it rest

    Thanks for your time and effort!

    Kind regards,
    Ivar

Viewing 6 replies - 1 through 6 (of 6 total)

The topic ‘False alert about created admin user’ is closed to new replies.