Suspicious activities

Hello,

I have this plugin installed with the latest version 2.8.6.

Unfortunately, I’m getting too many emails with the following message:

This is to inform you that there are suspicious activities with the following account(s):
/user/tempuser_236430365/ rejected
/user/tonyc8c9a2ebaae6ab80/ rejected
Due to that we have set each account(s) status to rejected or deactivated, revoked roles & destroyed the login session.
– Sent via Ultimate Member plugin.

I also notice that all these users don’t have any role assigned, which is weird because the default role is “Subscriber”.

My registration form settings:
https://prnt.sc/-jk3IIGhSwXl

I have the WordFence installed but I’m worry about how can they create these accounts…

I tried to disable registrations from WordPress Settings -> General -> Anyone can register, but it seems that disables registration/login from ultimate member as well…

Any suggestions, please?
I don’t see any attack yet, but I would like to prevent this to happen before is too late.

Thank you

• This topic was modified 1 year, 9 months ago by Divvy.